Security Bulletin: A vulnerability in zlib affects IBM Common Inventory Technology (CIT).

Summary Zlib library before 1.2.12 used by IBM Common Inventory Technology is vulnerable to a denial of service, caused by a memory corruption in the deflate operation. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service, caused by a memory corruption...

Malicious Package

Overview cap-common-pages is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview assets-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview angieslist-visitor-app-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was...

The vulnerability of the CRM User Management Framework component of the Oracle Common Applications application in the Oracle E-Business Suite system, which allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the CRM User Management Framework component of the Oracle Common Applications application in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized acces...

The vulnerability of the Windows Common Log File System (CLFS) driver in the Microsoft Windows operating system allows a hacker to gain elevated privileges.

The vulnerability of the Windows Common Log File System CLFS driver in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Malicious code in loblaw_common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78024d641ae1a2ed1e77c8b510531356d1758b606aaf3f0bd924e4e6e315ef90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6728 Malicious code in ubuntu-drivers-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 120a9ee8cb577eade82f53c379544a55221c7b75001fb6db79c586624c380d31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ubuntu-drivers-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 120a9ee8cb577eade82f53c379544a55221c7b75001fb6db79c586624c380d31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3036 Malicious code in fin-common-snapshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae0d9b985978ca7fea3fb4ac9f5bb1be2d9c89b905d4f277fce3e0a463800b91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in medicare-common-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29c05d6cee577d5f86a2a760c23578b65068f7e091dc6519990f798f42d30a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4539 Malicious code in medicare-common-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29c05d6cee577d5f86a2a760c23578b65068f7e091dc6519990f798f42d30a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-538 Malicious code in @qcsfe/common-lmap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e573d99d8aa5fcb192e29cf689da667d25cbb60f961950083022e2828d04245e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-539 Malicious code in @qcsfe/common-progressbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7c6294ef6d6ec3f9b85c828075ff965973dc3969bcf40c2b30d897b0ccd8c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in common-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e55c898f659be0c1b99095443b479398de9f5feb6738daf3ad505a7040f7f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2125 Malicious code in common-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e55c898f659be0c1b99095443b479398de9f5feb6738daf3ad505a7040f7f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2755 Malicious code in enviso-web-components-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d75a7c878177290aa6c8c20615f8d9c791e5461f2f344511808c3ccc48e63da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @koop-components/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f65541f1517c06bff59a101dccd78835ef6faa62d821135d6318bf1d501b56b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acs-ui-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eb198d76eddd8c49bac72bea49559b8d349e2d762170f0312a5ff9736969a0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-829 Malicious code in acs-ui-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eb198d76eddd8c49bac72bea49559b8d349e2d762170f0312a5ff9736969a0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...