MAL-2022-1157 Malicious code in atlas-custom-behaviour (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 172632abe6319080d07f94e343d1a3fdf400a1df4042c7d8a1e9af0de5ce3287 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in harp-atlas-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 022ae8a7abfe3be6606aca88e7aa6a0c1f14c518c523a6652b335f01d520e3b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3563 Malicious code in harp-atlas-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 022ae8a7abfe3be6606aca88e7aa6a0c1f14c518c523a6652b335f01d520e3b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: atlas

An update is available for atlas. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

GHSA-WVMQ-W7M8-G9XM Insecure cookie storage in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script...

Insecure cookie storage in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script...

GHSA-M2RR-H6G4-9CM9 Path Traversal in Apache Atlas

Apache Atlas versions 0.6.0 incubating, 0.7.0 incubating, and 0.7.1 incubating allow access to the webapp directory contents by pointing to URIs like /js and /img...

Path Traversal in Apache Atlas

Apache Atlas versions 0.6.0 incubating, 0.7.0 incubating, and 0.7.1 incubating allow access to the webapp directory contents by pointing to URIs like /js and /img...

GHSA-9XWQ-72VP-5J3C Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality...

GHSA-FRQH-X6R7-H6MQ Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality...

Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality...

Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality...

Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting...

GHSA-Q586-7P8W-9PG8 Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting...

GHSA-FX92-WH72-8G9Q Apache Atlas produces Stack trace in error response

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information...

Apache Atlas produces Stack trace in error response

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information...

GHSA-236H-R3W7-C85C Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality...

Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality...

WordPress Atlas – Knowledge Base plugin <= 3.3.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Atlas – Knowledge Base plugin versions = 3.3.0. Solution No patched version available...

WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin <= 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin versions = 1.1.0. Solution Update the WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin to the late...