9882 matches found
CVE-2022-31805: Unprotected Transport of Credentials
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected...
CVE-2022-31805
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected...
Outside In Filters Component DoS
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK set is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...
Azure Real Time GUIX Studio Code Execution
The vulnerability of the Azure Real Time Operating System GUIX Studio lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
Azure Real Time GUIX Studio Code Execution
The vulnerability of the Azure Real Time Operating System GUIX Studio lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
Intel SGX Buffer Overflow Information Disclosure
The vulnerability in the Intel Software Guard Extensions SDK, microsoftware such as Intel SGX DCAP and SGX PSW, is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
How to Secure App Development in the Cloud, With Tips From Gartner
Building applications in the cloud has been great for development speed and scalability, but it can sometimes feel more like a sustained migraine for security teams. How do you keep your cloud applications safe without resorting to a dizzying patchwork of overlapping tools and dispersed services?...
Moderate: Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update
An update for the nodejs:12 module is now available for Red Hat Enterprise Linux 8. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Bug Fixes and Enhancements: nodejs:12/nodejs: rebase to last upstream release...
Malicious code in development-guide (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23fee7eb3ceb54ffceb35cd803eddfae751b7889bc90a3fe1afcf309fc7411e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2456 Malicious code in development-guide (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23fee7eb3ceb54ffceb35cd803eddfae751b7889bc90a3fe1afcf309fc7411e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in superapp-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8661287acb0d1449413e363c682ab1d8cc1815d42b6c36e957f78dfeb8d4e54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ember-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc242e9ee4713b30aee81ff739dc19c110f1e9753eaccefd8d26de3f2a9c2e5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
How one Microsoft software engineer works to improve access management
There’s still a perception that the most successful computer scientists learn programming at a young age, study engineering at a top school, and then get a software development job right out of college. While that’s how many people enter the field, it’s not the only path. Microsoft Software...
How one Microsoft software engineer works to improve access management
There’s still a perception that the most successful computer scientists learn programming at a young age, study engineering at a top school, and then get a software development job right out of college. While that’s how many people enter the field, it’s not the only path. Microsoft Software...
Malicious code in ui-extensions-dev-console-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f16840f7273c569f73bfa9dbed041fcb7c6e26a8ae579a37e2a293da82a7aff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sdk-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de66f690acbb62cee826234fc58f16d56e1adcedc66f23059dcef93e5b1f158 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
LambdaGuard - AWS Serverless Security
AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code. LambdaGuard is an AWS Lambda auditing tool designed to create asset...
Neetai Tech SQL Injection Vulnerability
Neetai Tech is a web development, GST software and accounting software from Neetai India.Neetai Tech is vulnerable to SQL injection, which can be exploited by attackers to cause sql injection issues via manipulation of the /product.php file...
Outside In Filters Component DoS
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK set is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...
SAP NetWeaver Development Infrastructure跨站脚本漏洞
SAP NetWeaver Development Infrastructure is an SAP company that provides a consistent development environment, development teams, and support for software development throughout the product lifecycle. A cross-site scripting vulnerability exists in SAP NetWeaver Development Infrastructure, which c...