KLA12585 OSI vulnerability in Microsoft Dynamics

An information disclosure vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2022-30187 Related products Microsoft-Azure CVE list CVE-2022-30187 warning KB list Solution Install necessary updates...

Malicious code in azure-storage-file-share (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d0a4f5d8db5bb3e95f30e50e14b8f32f3a84fa54a5d638eee19679f83040554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-storage-blob-changefeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82d9678e620a731040f4e69c1e04932c1484859155e94875d9e5d5a96fff1e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-storage-queue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 817015f4821a3efffc41e7fe04ce95d36839db3aa6b53ce082b70b90c828d865 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1378 Malicious code in azure-storage-blob-changefeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82d9678e620a731040f4e69c1e04932c1484859155e94875d9e5d5a96fff1e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1382 Malicious code in azure-storage-file-share (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d0a4f5d8db5bb3e95f30e50e14b8f32f3a84fa54a5d638eee19679f83040554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-storage-file-datalake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79cc6d1a6914bd899921b6bc5acb60a552608f596d3415f2d0c6e682bc6229cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b5ebb48afe8466af23879ea49942310d63823078c7b8127bbe94867ec42b15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1377 Malicious code in azure-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b5ebb48afe8466af23879ea49942310d63823078c7b8127bbe94867ec42b15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-storage-common-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10f2d9d05c663e24ede071f09a82e5c1b34d19d1332c4c152be774f63703ed33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1379 Malicious code in azure-storage-common-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10f2d9d05c663e24ede071f09a82e5c1b34d19d1332c4c152be774f63703ed33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-storage-file-datalake-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5b4c17c2a179fb0785f346f58f0d8cf2e5552fef056333503b664b9b20ae8fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1381 Malicious code in azure-storage-file-datalake-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5b4c17c2a179fb0785f346f58f0d8cf2e5552fef056333503b664b9b20ae8fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-storageimportexport-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7b652c2bfd2234d5572f74a8c829d6ba3c5bc908f86b849767cf67e9f780db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

org.jenkins-ci.plugins:azure-container-agents (>=0.3.0 <=0.4.1), org.jenkins-ci.plugins:s3 (>=0.6 <=0.11.2) +2 more potentially affected by CVE-2020-2183 via org.jenkins-ci.plugins:copyartifact (>=1.21 <=1.38)

org.jenkins-ci.plugins:copyartifact MAVEN version =1.21, =0.3.0, =0.6, =0.16, =0.3.4, =0.3.13 Source cves: CVE-2020-2183 Source advisory: OSV:GHSA-VV89-XGGX-QQH2...

com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9 <=4.1.0), org.jenkins-ci.lib:xtrigger-lib (=0.36) +13 more potentially affected by CVE-2016-0788 via org.jenkins-ci.main:jenkins-core (>=1.643 <=1.649)

org.jenkins-ci.main:jenkins-core MAVEN version =1.643, =4.0.9, =1.643, =1.643, =1.645, =0.5, =1.648, =4.0.4, =1.0.0, =1.643, =1.0.45, =0.3.2, =0.3.8 - org.jenkins.plugins.statistics.gatherer:statistics-gatherer =1.0.1 Source cves: CVE-2016-0788 Source advisory: OSV:GHSA-J7Q5-H445-F7PC...

com.elasticbox.jenkins-ci.plugins:elasticbox (>=4.0.9 <=4.1.0), org.jenkins-ci.lib:xtrigger-lib (=0.36) +13 more potentially affected by CVE-2016-0789 via org.jenkins-ci.main:jenkins-core (>=1.643 <=1.649)

org.jenkins-ci.main:jenkins-core MAVEN version =1.643, =4.0.9, =1.643, =1.643, =1.645, =0.5, =1.648, =4.0.4, =1.0.0, =1.643, =1.0.45, =0.3.2, =0.3.8 - org.jenkins.plugins.statistics.gatherer:statistics-gatherer =1.0.1 Source cves: CVE-2016-0789 Source advisory: OSV:GHSA-8P3C-M625-WH83...

W3 Total Cache < 2.1.3 - Authenticated Stored XSS

The plugin did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output in the page, leading to an authenticated Stored Cross-Site Scripting issue Vulnerable parameters: &cdncnames= 1, cdncnames= 2, cdncnames= 3. CDN Type:...

Exodus: Cache Poisoning DoS on downloads.exodus.com

Summary: Hello, The subdomain downloads.exodus.com hosts all files meant to be downloaded by exodus users. A few of the file I found are: https://downloads.exodus.com/releases/exodus-linux-x64-21.4.9.zip https://downloads.exodus.com/releases/hashes-exodus-21.2.12.txt...

How Our Threat Analytics Multi-Region Data Lake on AWS Stores More, Slashes Costs

Data is the lifeblood of digital businesses, and a key competitive advantage. The question is: how can you store your data cost-efficiently, access it quickly, while abiding by privacy laws? At Imperva, we wanted to store our data for long-term access. Databases would’ve cost too much in disk and...