4515 matches found
CVE-2022-20549
In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android...
CVE-2021-34080
OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...
CVE-2020-35898
An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...
CVE-2018-25068
A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The...
Malicious code in gs-uitk-set-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eec9d66675cce0bdb728e268927a574f11c5c89203e65d7df822ee40fe3952df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4180 Malicious code in gs-uitk-set-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eec9d66675cce0bdb728e268927a574f11c5c89203e65d7df822ee40fe3952df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gs-uitk-promise-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4179 Malicious code in gs-uitk-promise-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2015-10016
A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function DatabaseForRegion of the file regionscrits.php. The manipulation of the argument region leads to sql injection. The patch is identified as...
CVE-2019-15558
XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...
Malicious code in node-telegram-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b37fa136531c0a67cc2376f7806ed7815076d3947395b944423d6bce51c94a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4281 Malicious code in node-telegram-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b37fa136531c0a67cc2376f7806ed7815076d3947395b944423d6bce51c94a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2009-2657
nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2...
xdg-utils security update
1.1.3-13 - Update documentation for CVE-2022-4055 RHEL-87487 1.1.3-12 - Fix CVE-2022-4055 RHEL-87487...
Oracle Linux 9 : xdg-utils (ELSA-2025-7672)
The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-7672 advisory. - Update documentation for CVE-2022-4055 RHEL-87487 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
CVE-1999-0704
Buffer overflow in Berkeley automounter daemon amd logging facility provided in the Linux am-utils package and others...
MAL-2025-4092 Malicious code in keypair-encrypt-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a2d0ae49bf40dbf55ae8f036a2014dccfa4ad0194cebdc787acbfb69658df40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in keypair-encrypt-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a2d0ae49bf40dbf55ae8f036a2014dccfa4ad0194cebdc787acbfb69658df40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in br2s-ui-common-utils-02 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50d87546caa948c8d15e1a997c9002ed36ae954510c72572cf4535474a70a0a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4070 Malicious code in company-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd5015b0393c3e2981f574bba469382525576dba01b38627ab06d4244bf497d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...