Design/Logic Flaw

The package asciitable.js before 1.0.3 are vulnerable to Prototype Pollution via the main function...

@cyber-insight/cyber-scripts (>=1.7.9, <=6.0.0-alpha.4), @cyber.insight/cyber-scripts (>=1.0.0, <=1.0.2) +4 more potentially affected by CVE-2020-7795 via get-npm-package-version (1.0.6)

get-npm-package-version NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on get-npm-package-version and may be impacted: - @cyber-insight/cyber-scripts =1.7.9, =1.0.0, =5.0.20, =1.0.0, =1.0.7 - temp-test-scripts 0.0.30 Source cves:...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via main function in index.js. PoC var a = require"get-npm-package-version"; a"& touch JHU"; Remediation Upgrade get-npm-package-version to version 1.0.7 or higher. References - GitHub Commit - NPM Package - Vulnerable...

3a-server (>=0.7.41, <=0.9.10), 3a-server-mongo (>=0.1.0-beta.1, <=1.0.0-beta.1) +11 more potentially affected by unknown CVE via html-pdf-chrome (>=0.2.0, <=0.5.0)

html-pdf-chrome NPM version =0.2.0, =0.7.41, =0.1.0-beta.1, =0.1.3, =0.2.0, =1.0.0, =1.1.0, =1.0.0, =0.1.0, =1.0.3, =0.0.0, =0.5.12 Source cves: unknown CVE Source advisory: OSV:GHSA-5P98-WPC9-G498...

PT-2020-21138

Name of the Vulnerable Software and Affected Versions Package version 2.0.2 Description The issue concerns malicious code in the package that targets the Ethereum cryptocurrency, allowing it to perform unauthorized transactions to wallets not controlled by the user. Recommendations Remove the...

PT-2020-21105

Name of the Vulnerable Software and Affected Versions Package version 2.0.2 Description The issue concerns malicious code in the package that targets the Ethereum cryptocurrency, allowing it to perform unauthorized transactions to wallets not controlled by the user. Recommendations Remove the...

PT-2020-21382

Name of the Vulnerable Software and Affected Versions Package version 2.0.2 Description The issue concerns malicious code in the package that targets the Ethereum cryptocurrency, allowing it to perform unauthorized transactions to wallets not controlled by the user. Recommendations Remove the...

openSUSE: Security Advisory for ntp (openSUSE-SU-2020:1007-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Design/Logic Flaw

This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation...

jbig2dec security update

0.14-4 - Add explicit package version requirement on jbig2dec-libs to jbig2dec related: 1851057 0.14-3 - Fix CVE-2020-12268 resolves: 1851057...

Fedora 32 : filezilla / libfilezilla (2020-74dd64990b)

3.48.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. The...

CVE-2020-8014

Removed by vendor...

[SECURITY] [DLA 2116-1] libpam-radius-auth security update

Package : libpam-radius-auth Version : 1.3.16-4.4+deb8u1 CVE ID : CVE-2015-9542 Debian Bug : 951396 A vulnerability was found in pamradius: the password length check was done incorrectly in the addpassword function in pamradiusauth.c, resulting in a stack based buffer overflow. This could be used...

Security fix for the ALT Linux 10 package php8.0 version 7.3.14-alt1

Feb. 4, 2020 Anton Farygin 7.3.14-alt1 - 7.3.14 Fixes: CVE-2020-7060, CVE-2020-7059...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2019-1755)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1786)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2061-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1939-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4433-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3792-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...