Security fix for the ALT Linux 10 package MySQL version 8.0.29-alt1

8.0.29-alt1 built July 5, 2022 Nikolai Kostrigin in task 302902 --- June 30, 2022 Nikolai Kostrigin - new version + fixes: CVE-2021-22570, CVE-2022-0778, CVE-2022-21454, CVE-2022-21457 + fixes: CVE-2022-21425, CVE-2022-21440, CVE-2022-21459, CVE-2022-21478 + fixes: CVE-2022-21479, CVE-2022-21418,...

July 5, 2022, update for Office 2016 (KB5002192)

None None...

Attacker may front-run acceptCounterOffer() cause users to take both original order and new one

Lines of code Vulnerability details Impact Function PuttyV2.acceptCounterOffer is used in case users see better deal and want to cancel their own order before filling the new one. But attacker can abuse this function by front-run calling fillOrder before it is cancelled in acceptCounterOffer...

The vulnerability of Splunk Enterprise’s deployment servers allows a attacker to compromise the Universal Forwarder and execute arbitrary code.

The vulnerability of the Splunk Enterprise platform’s deployment servers is related to lack of access control. Exploiting this vulnerability allows a malicious actor to compromise the Universal Forwarder and execute arbitrary code...

Red Hat openshift node-utils 安全漏洞

Red Hat openshift node-utils is a cloud application Platform-as-a-Service PaaS package from Red Hat, Inc. A security vulnerability exists in Red Hat openshift node-utils, which originates when watchman creates /var/run/watchman.pid and /var/log/watchman.ouput with global writable privileges...

User fund lose in addLiquidity() of LiquidityReserve by increasing (totalLockedValue / totalSupply()) to very large number by attacker

Lines of code Vulnerability details Impact Function addLiquidity suppose to do add Liquidity for the staking Token and receive lrToken in exchange. to calculate amount of IrToken codes uses this calculation: amountToMint = amount lrFoxSupply / totalLockedValue but it's possible for attacker to...

CVE-2022-34176

Jenkins JUnit Plugin 1119.vaa5e9068dad7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...

Malicious Package

Overview helix-run-query is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

Malicious code in sncicd-tests-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4be8f2247f95470e297a82a1f688243b369a67e3df14dca0a017f9ddecb88aee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6192 Malicious code in sncicd-tests-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4be8f2247f95470e297a82a1f688243b369a67e3df14dca0a017f9ddecb88aee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in run-topologically (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 471eb5ddca3487842f083975bb29429d88aa8cb2b80a5492fe33e006c2579108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helix-run-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3bbd6572566ee67b93b08556dbb6c301091b2feb4e310ab55697867517d602 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Missing slippage protection for autocompounding auraBAL rewards into AURA

Lines of code Vulnerability details Impact Autocompounding auraBAL rewards into AURA requires multiple swaps auraBAL - BAL/ETH BPT - WETH - AURA within MyStrategy.harvest. The swaps are at risk of being front-run / sandwiched, resulting in a loss of funds. Since MEV is very prominent I think the...

Tenable Network Security Nessus操作系统命令注入漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security. An operating system command injection vulnerability exists in Tenable Network Security Nessus version 10.1.3 and earlier versions, which can be exploited by an authenticated attacker to...

Illumina Local Run Manager Information Disclosure Vulnerability

Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager contains an information disclosure vulnerability that could be exploited by remote attackers to...

Illumina Local Run Manager File Upload Vulnerability

Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager contains a file upload vulnerability that could be exploited by an attacker to upload any file typ...

Illumina Local Run Manager Path Traversal Vulnerability

Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager is vulnerable to a path traversal vulnerability that stems from an input validation error when...

Illumina Local Run Manager 访问控制错误漏洞

Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager is vulnerable to an access control error that could be exploited by remote attackers to gain...

Illumina Local Run Manager 安全漏洞

Illumina Local Run Manager is an integrated solution from Illumina, Inc. Designed to create sequencing runs, monitor run status, analyze sequencing data, and view results, Illumina Local Run Manager contains an information disclosure vulnerability that could be exploited by remote attackers to...

Illumina Local Run Manager 代码注入漏洞

Illumina Local Run Manager is an integrated solution from Illumina, Inc. Illumina Local Run Manager is vulnerable to code injection, which could be exploited by attackers to remotely upload and execute code at the operating system level...