RHEL 8 : shadow-utils (RHSA-2024:0417)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0417 advisory. The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user a...

abi-ds-utils (=1.0.1), airflow-add-ons (=0.2.9b1) +14 more potentially affected by CVE-2023-51702 via apache-airflow (>=2.3.2 <=2.5.3)

apache-airflow PYPI version =2.3.2, =0.8.2, =0.1.0, =0.1.20, =2.3.0.dev0, =0.0.37, =0.1.0, =0.1.2, =2.4.3, =0.1.0, =0.10.0.1 and more Source cves: CVE-2023-51702 Source advisory: OSV:GHSA-MG2X-MGGJ-6955...

[SECURITY] Fedora 39 Update: coreutils-9.3-5.fc39

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...

CVE-2024-0601

A vulnerability was found in ZhongFuCheng3y Austin 1.0. It has been rated as critical. Affected by this issue is the function getRemoteUrl2File of the file src\main\java\com\java3y\austin\support\utils\AustinFileUtils.java of the component Email Message Template Handler. The manipulation leads to...

aries-askar (=0.1.2), indy-credx (>=0.2.0 <=0.3.1) +5 more potentially affected by CVE-2024-21670 via ursa (>=0.3.6 <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.0.6, =0.0.8 Source cves: CVE-2024-21670 Source advisory: OSV:GHSA-R78F-4Q2Q-HVV4...

aries-askar (=0.1.2), indy-credx (>=0.2.0 <=0.3.1) +5 more potentially affected by CVE-2024-22192 via ursa (>=0.3.6 <=0.3.7)

ursa CARGO version =0.3.6, =0.2.0, =0.5.0, =0.3.1, =0.1.0, =0.1.0, =0.0.6, =0.0.8 Source cves: CVE-2024-22192 Source advisory: OSV:GHSA-6698-MHXX-R84G...

EulerOS 2.0 SP10 : shadow (EulerOS-SA-2023-3231)

According to the versions of the shadow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second...

EulerOS 2.0 SP11 : shadow (EulerOS-SA-2023-3020)

According to the versions of the shadow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second...

EulerOS Virtualization 3.0.6.6 : iscsi-initiator-utils (EulerOS-SA-2023-3399)

According to the versions of the iscsi-initiator-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or...

EulerOS Virtualization 2.9.0 : shadow (EulerOS-SA-2024-1022)

According to the versions of the shadow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on t...

Malicious code in colors-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e4dcb786398ff89ed93f94d9221eaa6d94a42a7fe12838b8f5d743fcca7943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-106 Malicious code in colors-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e4dcb786398ff89ed93f94d9221eaa6d94a42a7fe12838b8f5d743fcca7943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-color-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f6bb2420bb3dd90627f3e58d133384bba145d7e9d866765cafc6c126aca6485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information Leakage

case-utils is vulnerable to Information Leakage. The vulnerability is caused due to improper handling of UUIDs generation within the localuuid function. This could allow an attacker to guess the UUID, resulting in sensitive data exposure...

cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

Impact What kind of vulnerability is it? Who is impacted? An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0 at and since 0.5.0, before 0.15.0. The vulnerability stems from a Python function,...

GHSA-RGRF-6MF5-M882 cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

Impact What kind of vulnerability is it? Who is impacted? An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0 at and since 0.5.0, before 0.15.0. The vulnerability stems from a Python function,...

CVE-2024-22194

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...

PYSEC-2024-6

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...

Information disclosure

cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0...

case-mapping (>=0.1.0 <=0.2.1), case-prov (>=0.11.0 <=0.14.0) +1 more potentially affected by CVE-2024-22194 via cdo-local-uuid (=0.5.0)

cdo-local-uuid PYPI version =0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cdo-local-uuid and may be impacted: - case-mapping =0.1.0, =0.11.0, =0.15.0, =0.17.0 Source cves: CVE-2024-22194 Source advisory: OSV:PYSEC-2024-6...