CVE-2020-14342

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges...

CVE-2020-14342

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges...

CVE-2020-14342

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges...

CVE-2020-14342: Improper Neutralization of Special Elements used in a Command

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges...

CVE-2020-14342

A flaw was found in cifs-utils' mount.cifs where it was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. This flaw allows an attacker who can invoke mount.cifs with special permission, such as via sudo rules, to escalate their privileges. The...

matlab-array-utils (>=1.0.1, <=1.0.2), react-plotter (0.0.1) potentially affected by unknown CVE via plotter (0.5.0)

plotter NPM version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on plotter and may be impacted: - matlab-array-utils =1.0.1, =1.0.2 - react-plotter 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-65XX-C85X-WG76...

matlab-array-utils (>=1.0.1, <=1.0.2), react-plotter (0.0.1) potentially affected by unknown CVE via plotter (0.5.0)

plotter NPM version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on plotter and may be impacted: - matlab-array-utils =1.0.1, =1.0.2 - react-plotter 0.0.1 Source cves: unknown CVE Source advisory: GHSA-65XX-C85X-WG76...

1filecompiler (0.0.2), @adrian.u/adritoolbox (>=1.0.0, <=1.1.0) +797 more potentially affected by CVE-2020-8147 via utils-extend (1.0.8)

utils-extend NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on utils-extend and may be impacted: - 1filecompiler 0.0.2 - @adrian.u/adritoolbox =1.0.0, =0.1.1, =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.0.1, =0.37.8, =1.0.1, =0.1.0, =1.0.2,...

1filecompiler (0.0.2), @adrian.u/adritoolbox (>=1.0.0, <=1.1.0) +797 more potentially affected by CVE-2020-8147 via utils-extend (1.0.8)

utils-extend NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on utils-extend and may be impacted: - 1filecompiler 0.0.2 - @adrian.u/adritoolbox =1.0.0, =0.1.1, =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.0.1, =0.37.8, =1.0.1, =0.1.0, =1.0.2,...

GHSA-6PQ3-928Q-X6W6 Prototype Pollution

All versions of utils-extend are vulnerable to prototype pollution. The extend function does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available...

GHSA-RFFP-MC78-WJF7 Command Injection in cocos-utils

All versions of cocos-utils are vulnerable to Remote Code Execution. The unzip function concatenates user input to exec which may allow attackers to execute arbitrary commands on the server. Recommendation No fix is currently available. Consider using an alternative module until a fix is made...

Prototype Pollution

nodee-utils is vulnerable to prototype pollution. The vulnerability exists as it does not restrict the proto header to be set through the deepSet function...

PT-2020-21488

Name of the Vulnerable Software and Affected Versions cocos-utils versions affected versions not specified Description The issue allows for Remote Code Execution. It is caused by the unzip function concatenating user input to exec, which may enable attackers to execute arbitrary commands on the...

CVE-2020-7722

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

Design/Logic Flaw

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

CVE-2020-7722 Prototype Pollution

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

CVE-2020-7722

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

CVE-2020-7722

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

CVE-2020-7722: Improperly Controlled Modification of Object Prototype Attributes

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

PT-2020-19743 · Node.Js · Nodee-Utils

Name of the Vulnerable Software and Affected Versions: nodee-utils versions prior to 1.2.3 Description: The issue concerns Prototype Pollution via the deepSet function. This allows for potential manipulation of object properties, which can lead to various security issues. Recommendations: For...