38 matches found
CVE-2026-69109: Path Traversal: '.../...//'
A vulnerability has been identified in Siemens License Server SLS All versions V5.3. The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application...
CVE-2026-69108: Incorrect Permission Assignment for Critical Resource
A vulnerability has been identified in Siemens License Server SLS All versions V5.1. The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to...
EUVD-2007-0909
Malware in sbrugna...
EUVD-2022-32378
Malicious code in bioql PyPI...
MAL-2025-33433 Malicious code in sls-wallet-orders (npm)
The package sls-wallet-orders was found to contain malicious code...
Malicious code in sls-wallet-orders (npm)
The package sls-wallet-orders was found to contain malicious code...
CVE-2025-30000: Improper Certificate Validation
A vulnerability has been identified in Siemens License Server SLS All versions V4.3. The affected application does not properly restrict permissions of the users. This could allow a lowly-privileged attacker to escalate their privileges...
Malicious code in eslint-plugin-sls-fe-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d5e8725b356d074bcecc1d1449ec0da5fef9ddc886c9d593dedf52a0d6f245 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11037 Malicious code in eslint-plugin-sls-fe-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d5e8725b356d074bcecc1d1449ec0da5fef9ddc886c9d593dedf52a0d6f245 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in eslint-plugin-sls-fe-lint
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in aliyun-sls (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6578 Malicious code in aliyun-sls (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in aliyun-sls_sdk (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
SUSE-SU-2023:4389-1 Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack bsc1215157 Bugs fixed: - Fix optimizationorder opt to prevent testsuite fails - Improve salt.utils.json.findjson to avoid fails bsc1213293 - Use salt-call from sal...
SUSE-SU-2023:4388-1 Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack bsc1215157 Bugs fixed: - Fix optimizationorder opt to prevent testsuite fails - Improve salt.utils.json.findjson to avoid fails bsc1213293 - Use salt-call from sal...
SUSE-SU-2023:4387-1 Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack bsc1215157 Bugs fixed: - Fix optimizationorder opt to prevent testsuite fails - Improve salt.utils.json.findjson to avoid fails bsc1213293 - Use salt-call from sal...
SUSE-SU-2023:4386-1 Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack bsc1215157 Bugs fixed: - Fix optimizationorder opt to prevent testsuite fails - Improve salt.utils.json.findjson to avoid fails bsc1213293 - Use salt-call from sal...
CVE-2022-27890
It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack wou...
Design/Logic Flaw
It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack wou...
CVE-2022-27890
It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack wou...