Remote Code Execution

react-editable-json-tree is vulnerable to remote code execution.The vulnerability exists in onSubmitValueParser prop which calls parse function in src/utils/parse.js because of missing sanitization of the parse parameters which allows a remote attacker to inject and execute malicious code into th...

Malicious code in wb-web-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e1293a15057bad482e250b8319d220ae10fc426decb819d94a510c9dca1f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7051 Malicious code in wb-web-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e1293a15057bad482e250b8319d220ae10fc426decb819d94a510c9dca1f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5822 Malicious code in rmesse-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95598c9e21fb55331bec7e3e8ec91ebf7174c5036d14918247fdc377c2aff6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rmesse-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95598c9e21fb55331bec7e3e8ec91ebf7174c5036d14918247fdc377c2aff6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6837 Malicious code in usaa-dls-build-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcc1ba2931e747b56e50e4acd7a8f7b19a8e670c5d73f5aff6eef5bc0a3803f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE: Security Advisory (SUSE-SU-2022:2801-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2802-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for cifs-utils (SUSE-SU-2022:2801-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : cifs-utils (SUSE-SU-2022:2802-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2802-1 advisory. - CVE-2022-29869: Fixed verbose messages on option parsing causing information leak bsc1198976. Tenable has extracted the preceding...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cifs-utils (SUSE-SU-2022:2801-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2801-1 advisory. - CVE-2022-29869: Fixed verbose messages on option parsing causing information leak bsc1198976. Tenable h...

SUSE-SU-2022:2802-1 Security update for cifs-utils

This update for cifs-utils fixes the following issues: - CVE-2022-29869: Fixed verbose messages on option parsing causing information leak bsc1198976...

OPENSUSE-SU-2022:2801-1 Security update for cifs-utils

This update for cifs-utils fixes the following issues: - CVE-2022-29869: Fixed verbose messages on option parsing causing information leak bsc1198976...

SUSE-SU-2022:2801-1 Security update for cifs-utils

This update for cifs-utils fixes the following issues: - CVE-2022-29869: Fixed verbose messages on option parsing causing information leak bsc1198976...

Malicious Package

Overview test-loader-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview kwaishop-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

xz security update

CentOS Errata and Security Advisory CESA-2022:5052 An update for xz is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2022-2152)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : cifs-utils (EulerOS-SA-2022-2127)

According to the versions of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers...

PT-2022-17535 · WordPress · Transposh Wordpress Translation Plugin

Name of the Vulnerable Software and Affected Versions: Transposh WordPress Translation plugin versions 1.0.8 and earlier Description: The issue allows access to sensitive actions, such as tp reset, under the Utilities tab, accessible via the /wp-admin/admin.php?page=tp utils endpoint. This...