Lucene search
K

136 matches found

CNVD
CNVD
added 2018/05/31 12:0 a.m.1 views

node-tkinter information disclosure vulnerability

node-tkinter is a malware that steals environment variables and sends them to attackers. A security vulnerability exists in node-tkinter. An attacker can use this vulnerability to steal environment variables and send them to an address under the attacker's control...

7.5CVSS7.6AI score0.00257EPSS
Exploits0References1
CNVD
CNVD
added 2018/05/31 12:0 a.m.1 views

tkinter Information Disclosure Vulnerability

tkinter is a malware that steals environment variables and sends them to attackers. A security vulnerability exists in tkinter. An attacker can exploit the vulnerability to steal environment variables and send them to an address under the attacker's control...

7.5CVSS7.6AI score0.00262EPSS
Exploits0References1
Veracode
Veracode
added 2018/05/30 5:56 a.m.19 views

Malicious Typo-Squatting

The node-tkinter packages is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.00257EPSS
Exploits0References1Affected Software1
Veracode
Veracode
added 2018/05/30 5:41 a.m.14 views

Malicious Typo-Squatting

The tkinter packages is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.00262EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2018/05/29 8:29 p.m.10 views

CVE-2017-16061

tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5CVSS7.5AI score0.00262EPSS
Exploits0References1
Prion
Prion
added 2018/05/29 8:29 p.m.10 views

Code injection

node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

5CVSS7.4AI score0.00257EPSS
Exploits0References1
Prion
Prion
added 2018/05/29 8:29 p.m.14 views

Code injection

tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

5CVSS7.4AI score0.00262EPSS
Exploits0References1
CVE
CVE
added 2018/05/29 8:0 p.m.49 views

CVE-2017-16062

CVE-2017-16062 relates to the npm package node-tkinter, which is described as malware that steals environment variables and sends them to attacker-controlled locations. The package has been unpublished from the npm registry. Practical impact stated across sources is the exposure of environment va...

7.5CVSS7.4AI score0.00257EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/05/29 8:0 p.m.16 views

CVE-2017-16061

tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5AI score0.00262EPSS
Exploits0References1
CVE
CVE
added 2018/05/29 8:0 p.m.50 views

CVE-2017-16061

The CVE refers to the npm package named tkinter, described as malware that steals environment variables and exfiltrates them to attacker-controlled locations. All versions have been unpublished from the npm registry. The MITRE-style impact is primarily confidentiality loss, with practical risk th...

7.5CVSS7.4AI score0.00262EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/05/29 8:0 p.m.17 views

CVE-2017-16062

node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5AI score0.00257EPSS
Exploits0References1
Fedora
Fedora
added 2018/04/06 11:10 a.m.38 views

[SECURITY] Fedora 28 Update: python3-3.6.5-1.fc28

Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...

7.5CVSS2.1AI score0.01779EPSS
Exploits1
Kitploit
Kitploit
added 2018/02/18 1:22 p.m.13 views

PcapXray - A Network Forensics Tool To visualize a Packet Capture offline as a Network Diagram

PcapXray is a Network Forensics Tool To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction. PcapXray Design Specification Goal: Given a Pcap File, plot a network diagram displaying hosts in the network,...

6.6AI score
Exploits0References1
Cent OS
Cent OS
added 2017/08/24 1:40 a.m.95 views

python, tkinter security update

CentOS Errata and Security Advisory CESA-2017:1868 An update for python is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

5.8CVSS6.6AI score0.02758EPSS
Exploits1References7
Node.js
Node.js
added 2017/08/08 10:24 p.m.31 views

Hijacked Environment Variables

Overview The node-tkinter package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real...

5CVSS4.7AI score0.00257EPSS
Exploits0Affected Software1
Node.js
Node.js
added 2017/08/08 10:21 p.m.27 views

Hijacked Environment Variables

Overview The tkinter package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real securit...

5CVSS4.6AI score0.00262EPSS
Exploits0Affected Software1
Cent OS
Cent OS
added 2016/11/25 3:43 p.m.72 views

python, tkinter security update

CentOS Errata and Security Advisory CESA-2016:2586 An update for python is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

10CVSS6.9AI score0.45123EPSS
Exploits1References7
Cent OS
Cent OS
added 2016/08/18 5:23 p.m.342 views

python, tkinter security update

CentOS Errata and Security Advisory CESA-2016:1626 An update for python is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...

6.5CVSS6.5AI score0.41714EPSS
Exploits6References7
Cent OS
Cent OS
added 2015/07/26 2:11 p.m.474 views

python, tkinter security update

CentOS Errata and Security Advisory CESA-2015:1330 Updated python packages that fix multiple security issues, several bugs and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common...

9.8CVSS7.3AI score0.33997EPSS
Exploits14References7
Tenable Nessus
Tenable Nessus
added 2014/10/22 12:0 a.m.37 views

Mandriva Linux Security Advisory : python (MDVSA-2014:197)

Updated python packages fix security vulnerability : Python before 2.7.8 is vulnerable to an integer overflow in the buffer type CVE-2014-7185. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux Security...

6.4CVSS7.5AI score0.01134EPSS
Exploits1References2
Rows per page
Query Builder