CVE-2022-26365

Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend CVE-2022-26365,...

CVE-2022-26365

Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend CVE-2022-26365,...

CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

CVE-2022-33743

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP eXpress Data Path, a code label was moved in a way allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen that...

Xen 信息泄露漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen, whic...

[SECURITY] Fedora 36 Update: yubihsm-connector-3.0.2-3.fc36

Backend to talk to YubiHSM 2...

Design/Logic Flaw

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions parse Server LiveQuery does not remove protected fields in classes, passing them to the client. The LiveQueryController now removes protected fields from the client respons...

Exploit for Server-Side Request Forgery in Microsoft

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange...

validate-data denial-of-service vulnerability (CNVD-2022-66399)

validate-data is a NodeJs backend library by Anoop P R Individual Developer. It is used to validate data according to the provided rules. A denial of service vulnerability exists in validate-data version v0.1.1, which stems from not properly handling incoming error messages and can be exploited b...

Code injection

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions certain types of invalid files requests are not handled properly and can crash the server. If you are running multiple Parse Server instances in a cluster, the availability...

Malicious code in donate-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f34f2656f71a6dd83aad2842516d892b07f5fb714baa894f588ea85223dd8e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2562 Malicious code in donate-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f34f2656f71a6dd83aad2842516d892b07f5fb714baa894f588ea85223dd8e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-140 Malicious code in @boosted-bounty/backend-interfaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e321f53166b07d10de6128dd2b775925a44c6ee21a7bdfb796c7183c02603521 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tulip-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c48e97ac65122c64d5d3b30ae0ff6def013c6ba12b9234659eef1e37de6e9bf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6680 Malicious code in tulip-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c48e97ac65122c64d5d3b30ae0ff6def013c6ba12b9234659eef1e37de6e9bf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in circonus-statsd-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afa7c3a42db827b718b5f5258ad2284197e6fe14119eefe269b8d143bce1a3f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1905 Malicious code in circonus-statsd-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afa7c3a42db827b718b5f5258ad2284197e6fe14119eefe269b8d143bce1a3f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-media-manager-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2e15d7f77f19a572c9210ef7e08167e4d552f0d01ccb9e128c7248e8004737c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-chat-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b8ec56558d6c308cf49e57273dfe9e67c582546beafd78d733540abdd4a8395 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...