Malicious code in reax3-pkg-uyp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b2d9d0734f5e68965fb90e95c848c40a2a434ad677bc737ad543c7e5b2b356a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in penzpyme-adapter-2react-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09a4de2f923dcb1c007436670591bc0a85d807c5829b7b84b9cb5476a819d968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mdz5-ile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e81722271fad554385db5283e1a49f5431f4e38d1d8f8a95c0e276558ccbdf28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gogl7eapiqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ff384b9cd1fe15dc7afec51fd04b972c8838a3442a876431cba7f83a1159b22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in edx-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a45186001f92d46e485ade8cdd9152dabbe881415b90667398d14c43d98bda4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karmachromelauncer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b24c9e6b5230521b612776e0a75cb98e60bf7d856a2d9d5c89b779d4f894c49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulpmiiycsns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99ad1625bdd36c7f327aaaca4492961ff5e5255b62763f27ba57570322258258 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gruntcontribjsint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ea6928f67fa84c4aba712b66bf3d7cf4f6fcd0d163ba9e40f07d3003c6b03a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deepas8ign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d6bc6b48914d85a2188bf3ec9dceaa10c650bab7cfd2fc5679d5f2423d72555 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 0supportscolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c430a61fb64569c2e4ee9d61d852f0189d613b8a916487edce0ba29c2ac69e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-26074

Incomplete cleanup in a firmware subsystem for IntelR SPS before versions SPSE304.08.04.330.0 and SPSE304.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access...

Input validation

Incomplete cleanup in a firmware subsystem for IntelR SPS before versions SPSE304.08.04.330.0 and SPSE304.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access...

Malicious code in website-snapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1735958a488b70e782deb5cfc750dfbe73844ef2f440148bb0808d7bfe2758e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in runkit-engines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4be2464f6278dde07fc3ccb7f25f3ffdac703b1655b64da93ec12e41a65f7e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CentOS: Security Advisory for bpftool (CESA-2022:5937)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2022:5937 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2022-20253

In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of service in Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545125...

CVE-2022-20253

In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of service in Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545125...

Design/Logic Flaw

In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of service in Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545125...

Oracle Linux 7 : kernel (ELSA-2022-5937)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5937 advisory. 3.10.0-1160.76.1.0.1.OL7 debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 3.10.0-1160.76.1.OL7 Update Oracle Linux certificates Ilya Okomin Oracle...