CVE-2023-0634

Removed by vendor...

Malicious code in dvf-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf18547f9f147479c4459ff3e5a5ea3c30c2f74abd59960980007211ed420ee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-294 Malicious code in dvf-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf18547f9f147479c4459ff3e5a5ea3c30c2f74abd59960980007211ed420ee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-0634

An uncontrolled process operation was found in the newgrp command provided by the shadow-utils package. This issue could cause the execution of arbitrary code provided by a user when running the newgrp command...

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2023-1247)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.12.1 security update

Red Hat OpenShift Container Platform release 4.12.1 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

Malicious code in proxy-stub-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eab7b2cd38fda0244b8fd8d667252f0874393d890662d57aad3c71364a8d9bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-704 Malicious code in proxy-stub-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eab7b2cd38fda0244b8fd8d667252f0874393d890662d57aad3c71364a8d9bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-906 Malicious code in trust-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc0592f3a898992e95d6073b40459a085c6fbb0e9691a63bc549f1689636ecdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trust-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc0592f3a898992e95d6073b40459a085c6fbb0e9691a63bc549f1689636ecdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS Virtualization 3.0.2.2 : cifs-utils (EulerOS-SA-2023-1247)

According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container c...

Malicious Package

Overview @nelio-content/utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview bsd-ui-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview trust-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

loader-utils: Regular expression denial of service

A flaw was found in loader-utils webpack library. When the url variable from interpolateName is set, the prototype can be polluted. This issue could lead to a regular expression Denial of Service ReDoS, affecting the availability of the affected component...

Important: Red Hat Security Advisory: Migration Toolkit for Runtimes security update

An update is now available for Migration Toolkit for Runtimes v1.0.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Malicious code in node-config-server-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26a77c066606c4a4a84afcd49a13b450d6d65f2d7f351ff6d37d75743c5e1792 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 8 : Red Hat OpenStack Platform 16.1.9 (python-oslo-utils) (RHSA-2022:8873)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8873 advisory. The OpenStack Oslo Utility library. Security Fixes: incorrect password masking in debug output CVE-2022-0718 For more details about the security...

CVE-2023-21849

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: Java utils. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications DBA...

Design/Logic Flaw

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite component: Java utils. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications DBA...