MAL-2022-7373 Malicious code in zagqckhvirtmwfun (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa12d3122e6768f881d68f6dd88ef5c6f3f6c4bc16be26e272af173ccc6cf180 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hksnzojebplygmqi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21accaf3bb53cec7046615b081b7c6becceb550b00328f3f7e2b737b4af51bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bsoldncqaiwkxftk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a914ce0d4c6cdb43575f4590de0a8a1409af46cc5303252fa3676075efb29027 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-356 Malicious code in @inaciot/internallib_v243 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aee86b3e40e4630832ddf086c10ac090a38ce4a5cda9ef035fd765064e51f6d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Eclipse Jetty DoS Vulnerability (GHSA-8mpp-f3f7-xc28) - Linux

Eclipse Jetty is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Eclipse Jetty DoS Vulnerability (GHSA-8mpp-f3f7-xc28) - Windows

Eclipse Jetty is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

GHSA-CJ7V-27PG-WF7Q vulnerabilities

Vulnerabilities for packages: druid, spark...

Malicious code in footericon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abd7d180b20b8c2f5eb6e7ed38e468ff34f377559f4cf012a298bebdebbaf99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nextcloud Server < 22.2.8, 23.x < 23.0.5, 24.x < 24.0.1 Command Injection Vulnerability (GHSA-264h-3v4w-6xh2)

Nextcloud Server is prone to an SMTP command injection vulnerability in iCalendar Attachments to emails via newlines. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Malicious code in syndis-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ae9423fd3ac4a55e3171cb0346060244adffd0c8afd82290ba1eb4345dae76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-3430

Assertion reachable with repeated LLCONNECTIONPARAMREQ. Zephyr versions = v1.14 contain Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-46h3-hjcq-2jjr...

CVE-2021-3435

Information leakage in leecredconnreq. Zephyr versions = v2.4.0 Use of Uninitialized Resource CWE-908. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xhg3-gvj6-4rqh...

Stack overflow

Stack based buffer overflow in leecredconnreq. Zephyr versions = v2.5.0 Stack-based Buffer Overflow CWE-121. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8w87-6rfp-cfrm...

GHSA-P782-XGP4-8HR8 vulnerabilities

Vulnerabilities for packages: kind, ctop, terraform-provider-sendgrid, grpcurl, kubeflow, k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips...

Malicious code in @amplify-components/amplify-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70abd4248b1a4ad04804bc31e5980f276eab9b5ce5b09a797225407fba9cfd02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6422 Malicious code in taxjar-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6023826d533e0005bb6eb243f84755034bce33d3f0de3ee904171fd42480858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gme-loblawsinc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a31f28e5ef895958873aac1361d82fa772cef76b1813a7013a80a556e14dada3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2151 Malicious code in config-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 758e9cd06382fa4e763a0d472eb1acad2baa19d30bf6a20bf3dabd8b11969557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wm-es3-function-overrider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e0c242f1a1754e5663d45843a9b1ed0432ac183e3171e3cf2adb5ee6be990c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cyclic-dep-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdcee1d5b332271ae97b1de6fc97e5ac5654212a82bfdd71b3676f2dfcaeee88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...