MAL-2022-542 Malicious code in @qualtrics-translations/qualtricsdesignsystemui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0119cbd28105b14fbc9605b5f5a0c32b096e56f842815c45d944f19f7d32f0a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2447 Malicious code in design-system-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf54fc5bdd0f75d047cec19cff91ad519eae2b7cd33b0471f1b527505df2668e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in design-system-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf54fc5bdd0f75d047cec19cff91ad519eae2b7cd33b0471f1b527505df2668e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-450 Malicious code in @ncr-design-system/cxd-npm-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1057092de4a4a513e2dfc25179d2f023f8dab1939839baea98b5d1e547dffd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-451 Malicious code in @ncr-design-system/cxd-npm-releases (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006d2f71b3519c6fc98d63cb3fe8db7b056395cb490db6a35bd2b75de7da5d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 Control Center devices before 8.1A SP02 P04. The vulnerability resides in the requestTempFile function in hwview.php. An attacker is able to influence the unitName POST parameter and inject special characters such as semicolons,...

Design/Logic Flaw

The WP-EMail WordPress plugin before 2.69.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based anti-spamming restrictions...

Malicious code in spaces-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe604e45c09dfdb8ae81eef2f85a6b920ea938592ebe27c79a7ddcb685fd7d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6226 Malicious code in spaces-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe604e45c09dfdb8ae81eef2f85a6b920ea938592ebe27c79a7ddcb685fd7d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /filemanager/upload/drop of the component File Upload. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. Upgradi...

Lepin EP-KP001 KP001_V19 Authentication Bypass

Advisory ID: SYSS-2022-024 Product: EP-KP001 Manufacturer: Lepin Affected Versions: KP001V19 Tested Versions: KP001V19 Vulnerability Type: Violation of Secure Design Principles CWE-657 Risk Level: High Solution Status: Open Manufacturer Notification: 2022-04-12 Solution Date: - Public Disclosure:...

Design/Logic Flaw

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

Design/Logic Flaw

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

Design/Logic Flaw

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

Maker order buyer is forced to reimburse the gas cost at any tx.gasprice

Lines of code Vulnerability details uint256 gasCost = startGasPerOrder - gasleft + wethTransferGasUnits tx.gasprice; // if the execution currency is weth, we can send the protocol fee and gas cost in one transfer to save gas // else we need to send the protocol fee separately in the execution...

Design/Logic Flaw

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

Design/Logic Flaw

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...

Design/Logic Flaw

An issue in the deletepost function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts...

Design/Logic Flaw

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

Design/Logic Flaw

A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution...