Malicious code in f0-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0bc80ffed72bd61fae6dc05340437a775bd61cb786636c3fdc8ba346429cc9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-4QVX-QQ5W-695P vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-MV93-WVCP-7M7R vulnerabilities

Vulnerabilities for packages: hey...

GHSA-MV93-WVCP-7M7R vulnerabilities

Vulnerabilities for packages: hey...

GHSA-4R78-HX75-JJJ2 vulnerabilities

Vulnerabilities for packages: hey...

GHSA-4R78-HX75-JJJ2 vulnerabilities

Vulnerabilities for packages: hey...

GHSA-3832-9276-X7GF vulnerabilities

Vulnerabilities for packages: hadoop-fips, trino, apicurio-registry, zaproxy...

GHSA-3832-9276-X7GF vulnerabilities

Vulnerabilities for packages: trino, apicurio-registry...

Updated python-twisted packages fix security vulnerability

CVE-2022-21712: It was discovered that Twisted incorrectly filtered HTTP headers when clients are being redirected to another origin. A remote attacker could use this issue to obtain sensitive information. CVE-2022-21716: It was discovered that Twisted incorrectly processed SSH handshake data on...

XWiki Crypto API Vulnerability (GHSA-h8v5-p258-pqf4)

XWiki is prone to a vulnerability in the Crypto API. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...

GHSA-4JRV-PPP4-JM57 vulnerabilities

Vulnerabilities for packages: trino...

Discourse < 2.8.3 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

GHSA-Q6H7-4QGW-2J9P vulnerabilities

Vulnerabilities for packages: k3d...

XWiki Privileged API Vulnerability (GHSA-ghcq-472w-vf4h)

XWiki is prone to a privileged API vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...

XWiki Information Disclosure Vulnerability (GHSA-97jg-43c9-q6pf)

XWiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

GHSA-C3H9-896R-86JM vulnerabilities

Vulnerabilities for packages: ctop, kubeflow, kubeflow-fips, k3d...

GHSA-C3H9-896R-86JM vulnerabilities

Vulnerabilities for packages: ctop, kubeflow, k3d...

GHSA-JC36-42CF-VQWJ vulnerabilities

Vulnerabilities for packages: zlib...

SUSE SLED15 / SLES15 Security Update : xstream (SUSE-SU-2022:0817-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0817-1 advisory. - CVE-2021-43859: Fixed a denial of service when unmarshalling highly recursive collections or maps bsc1195458. Tenable...

CVE-2022-24760

Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution RCE vulnerability in Parse Server. This vulnerability affects Parse Server in the default configuration with MongoDB. The main weakness that leads to RCE is the Prototype Pollution...