Remote Code Execution (RCE)

chromium is vulnerable to remote code execution. The vulnerability exists in url format which allows an attacker to inject and execute arbitrary codes...

MAL-2022-516 Malicious code in @porting-assistant/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c1f711d55f80d5bd350471903e1e022a54523b822bd6cd1af9c4042ffc803b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-514 Malicious code in @porting-assistant/electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0c5dc04c11f8e8434e22dc23673ac871d15cabae44c1fd6ea8a3ef9443c0c90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-515 Malicious code in @porting-assistant/integration-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757fb325921aaf211808046101e53811f0ac571b5b1f25882a8ea84b4e2ab05c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-ms-deploy-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe7c48a4ab3024ab51cf5a3b5bccdd0daa9bd6b87983ef3dd8137c3f697a0993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1200 Malicious code in aws-ms-deploy-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe7c48a4ab3024ab51cf5a3b5bccdd0daa9bd6b87983ef3dd8137c3f697a0993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29617

Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application...

CVE-2022-29617

Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application...

Input validation

Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application...

CVE-2022-29617

The CVE-2022-29617 entry concerns the CLA assistant (Contributor License Agreement assistant). Multiple connected sources describe an issue caused by improper error handling that allows an authenticated user to crash the CLA assistant instance, which could impact availability of the application. ...

CVE-2022-29617

Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application...

CVE-2022-29617

Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application...

CVE-2022-29617: Improper Handling of Exceptional Conditions

Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application...

The vulnerability of the Windows Update Assistant software relates to insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of the Windows Update Assistant software relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GHSA-MH78-8F49-VJG3 Home Assistant information disclosure vulnerability

Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py...

Home Assistant information disclosure vulnerability

Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py...

Withdrawn Advisory: Home Assistant Frontend XSS Vulnerability

Withdrawn Advisory This advisory has been withdrawn because we cannot confirm home-assistant-frontend is or was ever published to npm. Original Description In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...

GHSA-7WFQ-WMX2-3WR4 Withdrawn Advisory: Home Assistant Frontend XSS Vulnerability

Withdrawn Advisory This advisory has been withdrawn because we cannot confirm home-assistant-frontend is or was ever published to npm. Original Description In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to string injection vulnerability due to Node.js (CVE-2021-44532, CVE-2021-44532 )

Summary String injection vulnerabilities in Node.js - CVE-2021-44532, CVE-2021-44532, has been identified that affects IBM Watson Assistant for IBM Cloud Pak for Data. Node.js is used as cross-platform runtime environment by IBM Watson Assistant for IBM Cloud Pak for Data. The fix includes versio...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to an unspecified vulnerability in Java SE (CVE-2022-21293)

Summary An unspecified vulnerability in Java SE - CVE-2022-21293 related to the Libraries has been identified that affects IBM Watson Assistant for IBM Cloud Pak for Data. Java SE is used by IBM Watson Assistant for IBM Cloud Pak for Data as part of its platform for developement of core...