DSA-5157-1 cifs-utils - security update

Bulletin has no description...

Debian DSA-5157-1 : cifs-utils - security update

The remote Debian 10 / 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5157 advisory. - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root...

USN-5459-1 cifs-utils vulnerabilities

Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2020-14342 It was discovered that cifs-utils...

USN-5459-1: cifs-utils vulnerabilities

Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2020-14342 It was discovered that cifs-utils...

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

Command injection

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : cifs-utils vulnerabilities (USN-5459-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5459-1 advisory. Aurlien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker...

ssl-utils 操作系统命令注入漏洞

ssl-utils is a wrapper for some OpenSSL commands around Node.js. A security vulnerability exists in ssl-utils version 1.0.0, which can be exploited by an attacker to execute arbitrary commands...

CVE-2021-34080

CVE-2021-34080 describes an OS Command Injection in es128 ssl-utils 1.0.0 for Node.js, where unsanitized shell metacharacters supplied to createCertRequest() and createCert() enable arbitrary command execution. The provided connected documents (Red Hat, Veracode, GitHub advisory GHSA-552J-PV39-F3...

CVE-2021-34080

OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions...

Malicious code in @s3p-js-deep-purple/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51979342d98be531eeeaff886127fdf5b69d61a3556b72231095ef22a7c088d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

maven:3.6 security update

maven-shared-utils 3.2.1-0.4 - Build with OpenJDK 8...

Oracle Linux 8 : maven:3.6 (ELSA-2022-4797)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-4797 advisory. maven-shared-utils 3.2.1-0.4 - Build with OpenJDK 8 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Malicious code in uitk-react-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba5221edafff2a7c2c4d02c4c2098b3e6f2962b29c9340f782dab5ac45e0e3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6765 Malicious code in uitk-react-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba5221edafff2a7c2c4d02c4c2098b3e6f2962b29c9340f782dab5ac45e0e3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @clover-microapp/utils-isomorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 482eb0aee6eec7e82d910ad31d6b3b39e0f154377bc5ae979f98fa6b984fae01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oms-js-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f979ac49e09f1b3b30af6ae6dbf7c93f84fa24836cfcee4df4f677a1522dde6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2c617a6d61a62b6cadd5b810e4ef2ff8ab74e499dfe400bd5294f7b88e2a09c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: Red Hat Security Advisory: maven:3.5 security update

An update for the maven:3.5 module is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Extended Update Support, and Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common...