PT-2022-3741 · Microsoft · Windows Security Account Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Security Account Manager SAM affected versions not specified Description: The issue is related to the incorrect cleanup or release of resources in the Windows Security Account Manager SAM. It allows an attacker to cause a denial of...

svelte 跨站脚本漏洞

svelte is a new way to build web applications open-sourced by Svelte. A security vulnerability exists in svelte versions prior to 3.49.0, which stems from improper input cleanup in the toString function...

Malicious code in odgikqtuwcmvhpzn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 849e604c2ca9c89c0da2b89856fd4d8a4bc562b85dd2f5ad90b37c46e5aaadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epszkyqktamihwbr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0db54ef5424a49a8959731c78f67b21979e23a77059014b733d5312aad4af2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nkurkbscyphxzawt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e6aad02899969c630362e29e920f12a3de7165ce71c6fb5998d1b87db26234e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apzyjlbqwvkehmgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7449a0bc2ebf1412b37f3064f2e0d503722ffe0ffe5c96d09ff8013780ced3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axgponrjtfdlkwbz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc8bd093d4628ef7b408bc6bc175710596e1c5d5fc489fc5701cfa8f79d1bc5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in euvpiokkxdhmzwaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49df66418c850683b95610386943a2bfa894fdc827643f67309e747285ac0183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hpkeaxgjnldbuism (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b2cd39d60edd66a0f3054a182462e76a502c255ec5b5e5ee123c581b73a4fe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lmpcrfdnkyzehtja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767807fced35833959fb61fef9ce2fa85b57982c0c0340af8029f9068cd41b76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2022-223

mat2 aka metadata anonymisation toolkit before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive...

mat2 路径遍历漏洞

mat2 is a metadata removal tool by the individual developer of jvoisin. A path traversal vulnerability exists in versions of mat2 prior to 0.13.0, which stems from a vulnerability that allows traversal during ZIP archive cleanup of the ... / directory during ZIP archive cleanup. An attacker could...

Amazon Linux AMI : microcode_ctl (ALAS-2022-1606)

The version of microcodectl installed on the remote host is prior to 2.1-47.40. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1606 advisory. 2024-05-09: CVE-2021-33117 was added to this advisory. Improper access control for some 3rd Generation IntelR XeonR...

CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...

DEBIAN-CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...

UBUNTU-CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...

BookWyrm 跨站脚本漏洞

BookWyrm is a social reading platform. A cross-site scripting vulnerability exists in BookWyrm versions prior to 0.4.1, which stems from not properly cleaning up the html presented to the user, and is exploited by an attacker to perform cross-site scripting attacks...

IBM Security Verify Access 跨站脚本漏洞

IBM Security Verify Access ISAM is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls,...

Malicious code in ajax-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a42a0d791115ba30e5e048f5af09cdaff93938a6ca4a25d5af7ae617df66b47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2022:2276-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-197102 fixes one issue. The following security issue was fixed: - CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. bnc1199605...