EUVD-2019-0648

Malware in sbrugna...

Malicious code in mvc-seneca (npm)

The package mvc-seneca was found to contain malicious code...

MAL-2025-26926 Malicious code in mvc-seneca (npm)

The package mvc-seneca was found to contain malicious code...

CVE-2019-5483

Seneca 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users...

CVE-2018-18929

The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and password. This can be found by a limited user account in an "unattend.xml" file left over on the C: drive from the Sysprep process. An attacker with this username a...

CVE-2018-18929

The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and password. This can be found by a limited user account in an "unattend.xml" file left over on the C: drive from the Sysprep process. An attacker with this username a...

CVE-2018-18929

The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and password. This can be found by a limited user account in an "unattend.xml" file left over on the C: drive from the Sysprep process. An attacker with this username a...

CVE-2018-18929

The CVE concerns Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104, where a default local administrator username/password can be found in an unattend.xml left on the C: drive from Sysprep. An attacker with these credentials can gain administrator-level access to the system. Th...

PT-2019-9670

Name of the Vulnerable Software and Affected Versions Tightrope Media Carousel Seneca HDn version 7.0.4.104 Description The issue concerns a default local administrator username and password that can be discovered by a limited user account. This sensitive information is stored in an "unattend.xml...

CVE-2018-18929: Use of Hard-coded Credentials

The Tightrope Media Carousel Seneca HDn Windows-based appliance 7.0.4.104 is shipped with a default local administrator username and password. This can be found by a limited user account in an "unattend.xml" file left over on the C: drive from the Sysprep process. An attacker with this username a...

@angstone/microservice (>=0.0.0, <=0.0.3), @nodeframe/seneca (>=2.1.0, <=2.2.20) +11 more potentially affected by CVE-2019-5483 via seneca (>=3.1.0, <=3.7.0)

seneca NPM version =3.1.0, =0.0.0, =2.1.0, =0.4.4, =0.1.0, =0.0.0, =0.0.0, =0.0.0, =1.7.9, =1.8.5 - seneca-in-practice 0.2.0 - seneca-kue 0.1.1-alpha.1 - seneca-telldus-live 0.1.0 - tfk-seneca-seeiendom-lookup 1.0.17 Source cves: CVE-2019-5483 Source advisory: OSV:GHSA-2XWV-3CC9-FP7C...

Sensitive Data Exposure in seneca

Versions of seneca prior to 3.9.0 are vulnerable to Sensitive Data Exposure. When a process using the package crashes all environment variables are printed. This may leak sensitive data such as access keys, especially given scenarios when log-monitoring systems store the error output...

GHSA-2XWV-3CC9-FP7C Sensitive Data Exposure in seneca

Versions of seneca prior to 3.9.0 are vulnerable to Sensitive Data Exposure. When a process using the package crashes all environment variables are printed. This may leak sensitive data such as access keys, especially given scenarios when log-monitoring systems store the error output...

CVE-2019-5483

Seneca 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users...

CVE-2019-5483

Seneca 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users...

Design/Logic Flaw

Seneca 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users...

CVE-2019-5483

CVE-2019-5483 affects Seneca prior to 3.9.0, exposing environment variables when a process crashes. Connected sources (Red Hat, OSV, GHSA, npm advisory, Veracode) confirm Sensitive Data Exposure due to printing environment data in crash logs. Impact is information disclosure of sensitive data suc...

CVE-2019-5483

Seneca 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users...

CVE-2019-5483

Seneca 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users...

PT-2019-17701

Name of the Vulnerable Software and Affected Versions Seneca versions prior to 3.9.0 Description The issue could lead to exposing environment variables to unauthorized users. When a process using the package crashes, all environment variables are printed, which may leak sensitive data such as...