AZL-33628 CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

AZL-35041 CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

Malicious code in obfuscation-detector2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcabc905756bb0ff739e32b0f597d3542ed346588adff156cad0db4d7a55ec62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5004 Malicious code in obfuscation-detector2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcabc905756bb0ff739e32b0f597d3542ed346588adff156cad0db4d7a55ec62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Node.js 安全漏洞

Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js version 16.5.4 and versions prior to 17.1.3 in the 17.x series, which stems from the fact that an incorrectly formatted MKV file may cause the file type detector to fall into an...

Heap-based buffer overflow in function inc

Description Heap-based buffer overflow in function inc at misc2.c:344 Version commit 8eba2bd291b347e3008aa9e565652d51ad638cfa HEAD, tag: v8.2.5151 Proof of Concept guest@elk:/trung$ valgrind ./vimlatest/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./poc/poc80min3 -c :qa! ==6151== Memcheck, a memo...

Null pointer dereference in function diff_check

Description Null pointer dereference in function diffcheck at diff.c:1923 Version commit 8eba2bd291b347e3008aa9e565652d51ad638cfa HEAD, tag: v8.2.5151 Proof of Concept guest@elk:/trung/vim2/src$ valgrind ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/guest/trung/poc/poc22 -c :qa! ==4357==...

AZL-35039 CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

Malicious code in service-worker-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0227fa64f6580d83366ed4110cea0b88710287e47c32ad089750b4cb645e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6034 Malicious code in service-worker-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0227fa64f6580d83366ed4110cea0b88710287e47c32ad089750b4cb645e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-ai-anomaly-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c654e658b8660ec3190eefd8d77de0b3c051d571d883e32936b1524bd5bf9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1224 Malicious code in azure-ai-anomaly-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c654e658b8660ec3190eefd8d77de0b3c051d571d883e32936b1524bd5bf9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Jenkins Application Detector跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application. Jenkins Application Detector 1.0.8 and earlier versions have a cross-site scripting vulnerability that stems from the program not properly escaping the view of the display...

Cross-site Scripting in Jenkins Application Detector Plugin

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

GHSA-6WH8-MR6F-6CX2 Cross-site Scripting in Jenkins Application Detector Plugin

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30960

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Cross site scripting

Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30960

CVE-2022-30960 affects Jenkins Application Detector Plugin (versions 1.0.8 and earlier). The vulnerability is a stored XSS due to failure to escape the name of Chois Application Version parameters on views displaying parameters, exploitable by attackers with Item/Configure permission. Connected s...