Arbitrary Code Execution

eslint-utils is vulnerable to arbitrary code execution. A lack of validation results in a prototype pollution vulnerability in the getStaticValue function which would allow an attacker to execute arbitrary code...

Arbitrary Code Execution

Overview Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName...

NewStart CGSL MAIN 4.05 : yum-utils Vulnerability (NS-SA-2019-0133)

The remote NewStart CGSL host, running version MAIN 4.05, has yum-utils packages installed that are affected by a vulnerability: - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacke...

NewStart CGSL CORE 5.04 / MAIN 5.04 : yum-utils Vulnerability (NS-SA-2019-0024)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has yum-utils packages installed that are affected by a vulnerability: - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. I...

The vulnerability of the PDF to HTML conversion tool, pdftohtml, related to the manipulation of the zero pointer, allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the PDF document conversion tool pdftohtml, which is part of the poppler-utils package, relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure in the application or execute arbitrary code by entering a...

Cross-site Scripting (XSS)

nifi-web-utils is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the request attribute value...

OracleVM 3.3 / 3.4 : bind (OVMSA-2019-0027)

The remote OracleVM system is missing necessary patches to address critical security updates : - Use only selected documentation files - Fix CVE-2018-5743 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2019-0027...

rhn-tools:1.0 bug fix update

An update is available for osad, spacewalk-abrt, rhn-custom-info, rhncfg, spacewalk-oscap, spacewalk-backend, rhn-virtualization, spacewalk-usix, rhnpush, spacewalk-client-cert, cobbler. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

GHSA-J9F8-8H89-J69X Remote Code Execution in node-os-utils

Versions of node-os-utils prior to 1.1.0 are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution. Recommendation Upgrade to version 1.1.0 or later...

Remote Code Execution in node-os-utils

Versions of node-os-utils prior to 1.1.0 are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution. Recommendation Upgrade to version 1.1.0 or later...

@condor-labs/metrics (>=1.3.0, <=1.3.5), zation (>=0.6.5, <=0.7.0) +3 more potentially affected by unknown CVE via node-os-utils (1.0.7)

node-os-utils NPM version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on node-os-utils and may be impacted: - @condor-labs/metrics =1.3.0, =0.6.5, =0.7.4, =0.2.2, =0.2.3 - zation-service-nodemailer 0.1.2 Source cves: unknown CVE Source advisory:...

PT-2019-6871 · Chicken +1 · Chicken +1

Name of the Vulnerable Software and Affected Versions: Chicken versions prior to 4.9.0 Description: The issue is related to an OS command injection vulnerability in the qs procedure from the utils module. Recommendations: For versions prior to 4.9.0, update to version 4.9.0 or later to resolve th...

EulerOS Virtualization for ARM 64 3.0.1.0 : yum-utils (EulerOS-SA-2019-1415)

According to the version of the yum-utils packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remo...

EulerOS Virtualization 3.0.1.0 : scsi-target-utils (EulerOS-SA-2019-1427)

According to the versions of the scsi-target-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Multiple buffer overflows in the iSNS implementation in isns.c in 1 Linux SCSI target framework aka tgt or...

ALBA-2019:0986 rhn-tools:1.0 bug fix update

AlmaLinux Network Tools provide programs and libraries that allow your system to use provisioning, monitoring, and configuration management capabilities provided by AlmaLinux Network and AlmaLinux Network Satellite. The spacewalk-remote-utils package contains the spacewalk-create-channel utility...

rhn-tools:1.0 bug fix update

An update is available for osad, spacewalk-abrt, rhn-custom-info, rhncfg, spacewalk-koan, spacewalk-oscap, spacewalk-backend, rhn-virtualization, spacewalk-usix, rhnpush, spacewalk-client-cert, cobbler, spacewalk-remote-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring Syst...

Fedora Update for coreutils FEDORA-2018-3a25355ab6

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Command Injection

Overview All versions of cocos-utils are vulnerable to Remote Code Execution. The unzip function concatenates user input to exec which may allow attackers to execute arbitrary commands on the server. Recommendation No fix is currently available. Consider using an alternative module until a fix is...

CVE-2019-11222: Out-of-bounds Write

gfbin128parse in utils/osdivers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafteddrmfile.xml file...

EulerOS Virtualization 2.5.3 : yum-utils (EulerOS-SA-2019-1160)

According to the version of the yum-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repositor...