Red Hat openshift node-utils 安全漏洞

Red Hat openshift node-utils is a cloud application Platform-as-a-Service PaaS package from Red Hat, Inc. A security vulnerability exists in Red Hat openshift node-utils, which originates when watchman creates /var/run/watchman.pid and /var/log/watchman.ouput with global writable privileges...

[SECURITY] [DLA 3059-1] maven-shared-utils security update

Debian LTS Advisory DLA-3059-1 [email protected] https://www.debian.org/lts/security/ ; Markus Koschany June 26, 2022 https://wiki.debian.org/LTS Package : maven-shared-utils Version : 3.0.0-1+deb9u1 CVE...

Debian DLA-3059-1 : maven-shared-utils - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3059 advisory. It was discovered that the Commandline class in maven-shared-utils, a collection of various utility classes for the Maven build system, can emit double-quoted strings witho...

Malicious Package

pygrata-utils is a malicious package. The library attempts to harvest and upload the AWS credentials, network interface information and environment variables to a remote endpoint: "hxxp://graph.pygrata.com:8000/upload."...

DLA-3059-1 maven-shared-utils - security update

Bulletin has no description...

Malicious Package

Overview vue-test-utils-mic is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview @clover-microapp/utils-isomorphic is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable...

Malicious Package

Overview oms-js-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview f0-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

MAL-2022-6163 Malicious code in slg-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dbd3031f472625754de58e128a37c5fd4d5784d9e57203f7a82ce8460e26b65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slg-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dbd3031f472625754de58e128a37c5fd4d5784d9e57203f7a82ce8460e26b65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS 2.0 SP8 : cifs-utils (EulerOS-SA-2022-1923)

According to the versions of the cifs-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attacker...

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2022-1923)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

org.apache.nifi:nifi-bootstrap (>=1.14.0 <=1.15.3), org.apache.nifi:nifi-single-user-iaa-providers (>=1.14.0 <=1.15.3) +2 more potentially affected by CVE-2022-26850 via org.apache.nifi:nifi-single-user-utils (>=1.14.0 <=1.15.3)

org.apache.nifi:nifi-single-user-utils MAVEN version =1.14.0, =1.14.0, =1.14.0, =1.14.0, =1.14.0, =1.15.3 Source cves: CVE-2022-26850 Source advisory: OSV:GHSA-RVP4-R3G6-8HXQ...

MAL-2022-5732 Malicious code in refocus-sample-generator-template-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 631548c717c3bbe8a8db0c1da07900bc6e8e906501e5ceb3a4c850a7f33351b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in refocus-sample-generator-template-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 631548c717c3bbe8a8db0c1da07900bc6e8e906501e5ceb3a4c850a7f33351b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7206 Malicious code in wm-xpath-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66f5ef937b1f93789c96da5ed71014fd20c3e82ba3c70c213e9d32590864bfe8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wm-xpath-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66f5ef937b1f93789c96da5ed71014fd20c3e82ba3c70c213e9d32590864bfe8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2132 Malicious code in commonweb-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 456cfde3873264b52e584f2f06fc9a23d107862cd418b7175b55d18e1ddb6aab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commonweb-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 456cfde3873264b52e584f2f06fc9a23d107862cd418b7175b55d18e1ddb6aab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...