oracle graalvm 20.3.3 vulnerabilities and exploits

(subscribe to this query)

The npm package "tar" (aka node-tar) prior to 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is no...

Npmjs Tar Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

`@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed in...

Npmjs Arborist Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

`@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into...

Npmjs Arborist Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

The npm package "tar" (aka node-tar) prior to 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. `node-tar` aims to guarantee that any file whose location would be modified by a symbolic link is no...

Tar Project Tar Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

The npm package "tar" (aka node-tar) prior to 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning absolute paths into ...

Tar Project Tar Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

1 Github repository

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.

Ssri Project Ssri Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

Versions of the npm CLI before 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would all...

Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Eus 8.1 Npmjs Npm Opensuse Leap 15.1 Oracle Graalvm 19.3.0.2 Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.2 Fedoraproject Fedora 31

The npm package "tar" (aka node-tar) prior to 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. Thi...

Npmjs Tar Debian Debian Linux 10.0 Debian Debian Linux 11.0 Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

The npm package "tar" (aka node-tar) prior to 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. Th...

Npmjs Tar Debian Debian Linux 10.0 Debian Debian Linux 11.0 Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

Node.js prior to 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Nodejs Node.js Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Oracle Jd Edwards Enterpriseone Tools Netapp Nextgen Api -Siemens Sinec Infrastructure Network Services Debian Debian Linux 10.0

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook