50 matches found
CVE-2026-69108: Incorrect Permission Assignment for Critical Resource
A vulnerability has been identified in Siemens License Server SLS All versions V5.1. The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to...
CVE-2026-69109: Path Traversal: '.../...//'
A vulnerability has been identified in Siemens License Server SLS All versions V5.3. The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application...
aws-lambda-sls (0.1.0), chalice (1.6.1) +4 more potentially affected by CVE-2026-13346 via pip (18.0.0)
pip PYPI version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aws-lambda-sls 0.1.0 - chalice 1.6.1 - lucterios =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =2.3.1.18112821 - venv-update 3.1.1 Source cves:...
Malicious code in aliyun-sls (RubyGems)
--- Credit: OpenSSF source...
aws-lambda-sls (0.1.0), chalice (1.6.1) +4 more potentially affected by CVE-2026-6357 via pip (18.0.0)
pip PYPI version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aws-lambda-sls 0.1.0 - chalice 1.6.1 - lucterios =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =2.3.1.18112821 - venv-update 3.1.1 Source cves:...
aws-lambda-sls (0.1.0), chalice (1.6.1) +4 more potentially affected by CVE-2026-3219 via pip (18.0.0)
pip PYPI version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aws-lambda-sls 0.1.0 - chalice 1.6.1 - lucterios =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =2.3.1.18112821 - venv-update 3.1.1 Source cves:...
aws-lambda-sls (0.1.0), chalice (1.6.1) +4 more potentially affected by CVE-2026-8643 via pip (18.0.0)
pip PYPI version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aws-lambda-sls 0.1.0 - chalice 1.6.1 - lucterios =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =2.3.1.18112821 - venv-update 3.1.1 Source cves:...
aws-lambda-sls (0.1.0), chalice (1.6.1) +4 more potentially affected by CVE-2026-8643 via pip (18.0.0)
pip PYPI version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aws-lambda-sls 0.1.0 - chalice 1.6.1 - lucterios =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =2.3.1.18112821 - venv-update 3.1.1 Source cves:...
aws-lambda-sls (0.1.0), chalice (1.6.1) +4 more potentially affected by CVE-2026-3219 via pip (18.0.0)
pip PYPI version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aws-lambda-sls 0.1.0 - chalice 1.6.1 - lucterios =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =2.3.1.18112821 - venv-update 3.1.1 Source cves:...
EUVD-2007-0909
Malware in sbrugna...
EUVD-2022-32378
Malicious code in bioql PyPI...
aws-lambda-sls (0.1.0), chalice (1.6.1) +4 more potentially affected by CVE-2025-8869 via pip (18.0.0)
pip PYPI version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aws-lambda-sls 0.1.0 - chalice 1.6.1 - lucterios =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =2.3.1.18112821 - venv-update 3.1.1 Source cves:...
MAL-2025-33433 Malicious code in sls-wallet-orders (npm)
The package sls-wallet-orders was found to contain malicious code...
Malicious code in sls-wallet-orders (npm)
The package sls-wallet-orders was found to contain malicious code...
CVE-2025-30000: Improper Certificate Validation
A vulnerability has been identified in Siemens License Server SLS All versions V4.3. The affected application does not properly restrict permissions of the users. This could allow a lowly-privileged attacker to escalate their privileges...
MAL-2024-11037 Malicious code in eslint-plugin-sls-fe-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d5e8725b356d074bcecc1d1449ec0da5fef9ddc886c9d593dedf52a0d6f245 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in eslint-plugin-sls-fe-lint
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in eslint-plugin-sls-fe-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d5e8725b356d074bcecc1d1449ec0da5fef9ddc886c9d593dedf52a0d6f245 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...