1032 matches found
CVE-2024-48964
The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning...
PT-2024-33301 · Snyk · Snyk Cli
Name of the Vulnerable Software and Affected Versions: Snyk CLI versions prior to 1.1294.0 Description: The issue is related to Code Injection when scanning an untrusted Gradle project. It can be triggered if a test is run inside the untrusted project due to the improper handling of the current...
[SECURITY] Fedora 41 Update: buildah-1.37.5-1.fc41
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
MAL-2024-9919 Malicious code in working-chocolate-tahr (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in working-chocolate-tahr (npm)
--- -= Per source details. Do not edit below this line.=-...
Unspecified Vulnerability in NETGEAR EX3700 (CNVD-2024-41044)
NETGEAR EX3700 is a wireless network signal extender from NETGEAR. A security vulnerability exists in the NETGEAR EX3700 prior to version 1.0.0.98, which originates from an authenticated command injection of the apmode parameter in workingmode.cgi. No details of the vulnerability are available at...
NETGEAR EX3700 安全漏洞
NETGEAR EX3700 is a wireless network signal extender from NETGEAR. A security vulnerability exists in the NETGEAR EX3700 prior to version 1.0.0.98, which originates from an authenticated command injection of the apmode parameter in workingmode.cgi. No details of the vulnerability are available at...
Malicious code in working-today--1-blocks-every-second-script-n9qfzq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware befe2b725bae28bf00547f7be8107d102adf5ae609e0ed65f03b5ba7a40f0662 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
gtk3: gtk2: Library injection from CWD
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...
gtk3 security update
3.22.30-12 - Stop loading modules from cwd CVE-2024-6655 - Resolves: RHEL-46988...
Moderate: Red Hat Security Advisory: buildah security update
An update for buildah is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
AFLplusplus: Arbitrary Code Execution
Background The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicornmode, and a lot more! Description In AFL++ 4.05c, the CmpLog component uses the current working directory to resolv...
SUSE CVE-2024-41817
ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The AppImage version ImageMagick might use an empty path when setting MAGICKCONFIGUREPATH and LDLIBRARYPATH environment variables while executing, which might lead to arbitrary code execution b...
CVE-2024-6655
...
UBUNTU-CVE-2024-41817
ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The AppImage version ImageMagick might use an empty path when setting MAGICKCONFIGUREPATH and LDLIBRARYPATH environment variables while executing, which might lead to arbitrary code execution b...
CVE-2024-6655
CVE-2024-6655 affects GTK+ libraries (gtk2 and gtk3) across multiple Linux distributions. The flaw allows library injection into a GTK application from the current working directory under certain conditions, enabling local attack with high impact on confidentiality, integrity, and availability. M...
SUSE CVE-2024-6655
A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...
Malicious code in cash-app-money-generator-new-working-2023-vajkiuea-kla (npm)
--- -= Per source details. Do not edit below this line.=-...