CVE-2023-43630 Config Partition Not Measured From 2 Fronts

PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in commit “7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4”, fixing this issue alone would not solve the problem of the config partition not being measured correctly. Also, the “vault” key is...

CVE-2022-3575

Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device...

Malicious code in dcrdata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814bc447b9fcf571cf3b5214166f22702d094e8ef3275b01cdc39e7ca1e28cf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-cap-it-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ca18ac9151018c2825df547bec5cd5b5e89b8fa04a66c3df553d1192ed5719 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwrvstaguqhzeloy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 626e6abecb93b8cd83fef07bc340994d153dd2e903b79306ebabc9ad9abbdfa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cadence-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf5debd39aec3e771c0dda1c42d6d3ce09232bd387c3e33c6e2dfd1b7737d639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epc-web-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38889e06f639b709a464f200703bbb6c2ec05b025c69d1002c150cd874ee73db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owa-accessibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb14eb03fe7358a1ac71f7f835357d50ed868b0f387e5d731feb76664e174b84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in duty-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d001cd5581e347ca7a86d5dda589c7fdf59f07ee4d0da52efe005686451377aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mozilla-mobile/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0f81ce8fcc04e7269be2b94ee6aa1ea2abdbd3f4c8e6286e9c2db240e307ca4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @glencore/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c24fb3cfba1edf0992ba23c73a07778f089ee7b9ca09d85fa0c22155971af47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @chegg-me-components/header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2243153078c6242a8399b5c02c6012c19cdec162fba625367192ec6b96affcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...