14 matches found
Malicious code in kresna-sambel86-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a3d9c5fafb06be919bbaa40c84d524baa0996fa5d3ec429d3e28be03f3f2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2017-11476
Malware in sbrugna...
EUVD-2010-0011
Malware in sbrugna...
SUSE CVE-2017-2293
Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this...
MoinMoin has improper default configuration
The default configuration of cfg.packagepagesactionsexcluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors...
GHSA-5JJR-GMQ3-F986 MoinMoin has improper default configuration
The default configuration of cfg.packagepagesactionsexcluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors...
Debian DSA-2014-1 : moin - several vulnerabilities
Several vulnerabilities have been discovered in moin, a python clone of WikiWiki. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0668 Multiple security issues in MoinMoin related to configurations that have a non-empty superuser list, the xmlrpc...
MoinMoin Wiki 'cfg' Package Configuration Unspecified Vulnerability
MoinMoin Wiki is prone to unspecified vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moinmo:moinmoin";...
Default configuration
The default configuration of cfg.packagepagesactionsexcluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors...
CVE-2010-0717
Affected software: MoinMoin prior to version 1.8.7. Issue: The default configuration of cfg.packagepages_actions_excluded does not prevent unsafe package actions, enabling an unspecified impact/attack vector. Several related advisories reference CVE-2010-0717. Impact (stated): Unspecified in init...
CVE-2010-0717
The default configuration of cfg.packagepagesactionsexcluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors...
CVE-2010-0717
The default configuration of cfg.packagepagesactionsexcluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors...
