MAL-2025-35816 Malicious code in test-mlw2-mowra-fetal (npm)

The package test-mlw2-mowra-fetal was found to contain malicious code...

CVE-2023-35816

DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...

CVE-2023-35816

DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...

CVE-2023-35816

creationtimestamp| type| source ---|---|--- 2025-04-28 16:11:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13696 2025-04-28 19:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvjzcs5bm2d 2025-04-28 19:55:01+00:00| seen| https://t.me/cvedetector/23923...

CVE-2023-35816

DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...

CVE-2023-35816

DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...

CVE-2024-35816 affecting package hyperv-daemons for versions less than 6.6.35.1-1

CVE-2024-35816 affecting package hyperv-daemons for versions less than 6.6.35.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-35816

CVE-2024-35816 (Linux kernel, firewire_ohci) is resolved by the patch that prevents leaking a leftover IRQ on unbind. The change, including commit 5a95f1ded28691e6, switches to devres for the requested IRQ and removes the call to free_irq() in pci_remove(), which previously left a devm_request_ir...

CVE-2022-35816

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-35816 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35816

CVE-2022-35816 concerns Microsoft Azure Site Recovery, specifically the VMware-to-Azure workflow. The connected PT-2022-4214 entry attributes the issue to insufficient access controls, enabling privilege escalation. In the Nessus/NVD context, the vulnerability is categorized as an elevation of pr...

CVE-2022-35816 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2020-35816

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...

CVE-2020-35816

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...

CVE-2020-35816

CVE-2020-35816 concerns stored Cross-Site Scripting in NETGEAR devices. Affected models and firmware floors include: D7800 < 1.0.1.56; R7500v2 < 1.0.3.46; R7800 < 1.0.2.74; R8900 < 1.0.4.28; R9000 < 1.0.4.28; RAX120 < 1.0.0.78; RBK20 < 2.3.5.26; RBR20 < 2.3.5.26; RBS20 &lt...

Processing malformed PNG by incoming mail handler causes OOM and blocks queue

There are two problems: 1. OOM 2. Incoming email processing is blocked Looks like this is similar problem to JRA-35816, fixed in atlassian-core, but mail handler does not use atlassian-core. It affects production OnDemand, all instances. codejava.lang.OutOfMemoryError: Java heap space Dumping hea...