siemens sinec infrastructure network services vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Node.js prior to 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe, with the latter holding a pointer to the end of the buffer. ...

Nodejs Node.js Siemens Sinec Infrastructure Network Services

4.4

CVSSv2

Node.js prior to 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an malicious user to perform two differen...

Nodejs Node.js Siemens Sinec Infrastructure Network Services

7.5

CVSSv2

The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the ...

Civetweb Project Civetweb Siemens Sinec Infrastructure Network Services

5

CVSSv2

The package hosted-git-info prior to 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity.

Npmjs Hosted-git-info Siemens Sinec Infrastructure Network Services

2 Github repositories

5

CVSSv2

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.

Sqlite Sqlite 3.30.1 Oracle Mysql Workbench Siemens Sinec Infrastructure Network Services Siemens Sinec Infrastructure Network Services 1.0.1.1 Apache Guacamole 1.3.0 Netapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -

4.4

CVSSv2

The npm package "tar" (aka node-tar) prior to 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is no...

Npmjs Tar Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

4.4

CVSSv2

`@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed in...

Npmjs Arborist Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

4.4

CVSSv2

`@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into...

Npmjs Arborist Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

5.8

CVSSv2

The npm package "tar" (aka node-tar) prior to 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. `node-tar` aims to guarantee that any file whose location would be modified by a symbolic link is no...

Tar Project Tar Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

5.8

CVSSv2

The npm package "tar" (aka node-tar) prior to 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning absolute paths into ...

Tar Project Tar Oracle Graalvm 20.3.3 Oracle Graalvm 21.2.0 Siemens Sinec Infrastructure Network Services

1 Github repository

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook