MAL-2022-224 Malicious code in @ebx-ui/ebx-ui-component-library-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6db834c8045417e3e41ad3434edf6b7d78a926da70d77e7e11a1c3494ae28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-3895 Potential XSS in common user interface component library

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML XSS...

Malicious Package

Overview truelayer-component-library is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...

CVE-2022-35837

Windows Graphics Component Information Disclosure Vulnerability...

Malicious code in walmart-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a19673157e170466d6dc024c7babea89c701b544db74ba60c8fa7d4f64888d42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7042 Malicious code in walmart-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a19673157e170466d6dc024c7babea89c701b544db74ba60c8fa7d4f64888d42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6945 Malicious code in visitor-ui-component-library-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a49ce3e79a28efd550ad3f4e2395fef81eb43c22efdaf89af060d89fd4649e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

JVN#56297719: JBoss RichFaces vulnerable to remote Java code execution

JBoss RichFaces is an Ajax-enabled component library for JavaServer Faces JSF. JBoss RichFaces contains a flaw in parsing the do parameter, which may result in arbitrary Java code execution. Impact When a specially crafted input is processed, arbitrary Java code may be executed on the application...