17 matches found
MAL-2025-35816 Malicious code in test-mlw2-mowra-fetal (npm)
The package test-mlw2-mowra-fetal was found to contain malicious code...
CVE-2023-35816
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...
CVE-2023-35816
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...
CVE-2023-35816
creationtimestamp| type| source ---|---|--- 2025-04-28 16:11:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13696 2025-04-28 19:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvjzcs5bm2d 2025-04-28 19:55:01+00:00| seen| https://t.me/cvedetector/23923...
CVE-2023-35816
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...
CVE-2023-35816
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion...
Malware in down-load-available-zip-now-35816-laughter-lust-jih3q-fajkvi
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2024-35816 affecting package hyperv-daemons for versions less than 6.6.35.1-1
CVE-2024-35816 affecting package hyperv-daemons for versions less than 6.6.35.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-35816
CVE-2024-35816 (Linux kernel, firewire_ohci) is resolved by the patch that prevents leaking a leftover IRQ on unbind. The change, including commit 5a95f1ded28691e6, switches to devres for the requested IRQ and removes the call to free_irq() in pci_remove(), which previously left a devm_request_ir...
CVE-2022-35816
Azure Site Recovery Elevation of Privilege Vulnerability...
CVE-2022-35816 Azure Site Recovery Elevation of Privilege Vulnerability
...
CVE-2022-35816
CVE-2022-35816 concerns Microsoft Azure Site Recovery, specifically the VMware-to-Azure workflow. The connected PT-2022-4214 entry attributes the issue to insufficient access controls, enabling privilege escalation. In the Nessus/NVD context, the vulnerability is categorized as an elevation of pr...
CVE-2022-35816 Azure Site Recovery Elevation of Privilege Vulnerability
...
CVE-2020-35816
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...
CVE-2020-35816
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30,...
CVE-2020-35816
CVE-2020-35816 concerns stored Cross-Site Scripting in NETGEAR devices. Affected models and firmware floors include: D7800 < 1.0.1.56; R7500v2 < 1.0.3.46; R7800 < 1.0.2.74; R8900 < 1.0.4.28; R9000 < 1.0.4.28; RAX120 < 1.0.0.78; RBK20 < 2.3.5.26; RBR20 < 2.3.5.26; RBS20 <...
Processing malformed PNG by incoming mail handler causes OOM and blocks queue
There are two problems: 1. OOM 2. Incoming email processing is blocked Looks like this is similar problem to JRA-35816, fixed in atlassian-core, but mail handler does not use atlassian-core. It affects production OnDemand, all instances. codejava.lang.OutOfMemoryError: Java heap space Dumping hea...