Oracle Linux 7 : thunderbird (ELSA-2023-1806)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-1806 advisory. 102.10.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 102.10.0-2 - Update to...

GHSA-CJR9-MR35-7XH6

creationtimestamp| type| source ---|---|--- 2023-04-15 00:26:24+00:00| published-proof-of-concept| https://t.me/cibsecurity/62198...

Nextcloud Server 24.0.4 < 24.0.7, 25.x < 25.0.1 Improper Access Control Vulnerability (GHSA-7w6h-5qgw-4j94)

Nextcloud Server is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Nextcloud Server 25.x < 25.0.3 DoS Vulnerability (GHSA-53q2-cm29-7j83)

Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FreeBSD : py39-OWSLib -- arbitrary file read vulnerability (e5d117b3-2153-4129-81ed-42b0221afa78)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e5d117b3-2153-4129-81ed-42b0221afa78 advisory. - OWSLib is a Python package for client programming with Open Geospatial Consortium OGC web service...

GHSA-CJR9-MR35-7XH6 vulnerabilities

Vulnerabilities for packages: spicedb...

MAL-2023-432 Malicious code in fca-zach-remade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9647625dc78eb955e2d970aa60159a08d9e50e1e80f1be250861c8428d918935 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-W4M3-43GP-X8HX vulnerabilities

Vulnerabilities for packages: dotnet...

GHSA-232P-VWFF-86MP vulnerabilities

Vulnerabilities for packages: up, ctop, ko, bom, helm, melange, apko...

GHSA-33PG-M6JH-5237 vulnerabilities

Vulnerabilities for packages: up, ctop, ko, bom, helm, melange, apko...

GHSA-6WRF-MXFJ-PF5P vulnerabilities

Vulnerabilities for packages: apko, melange, up, ctop, helm, bom, ko...

GHSA-6WRF-MXFJ-PF5P vulnerabilities

Vulnerabilities for packages: up, ctop, ko, bom, helm, melange, apko...

CVE-2023-28842 moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

Nextcloud Server 25.x < 25.0.3 DoS Vulnerability (GHSA-9wmj-gp8v-477j)

Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MAL-2023-653 Malicious code in omnigodz_testpkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b71e35f587d48902bd1b3b26de78a66c82c7f28faf7e7d339b607497d40cc318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nextcloud Server 24.x < 24.0.9, 25.x < 25.0.3 Incorrectly-Resolved Name or Reference Vulnerability (GHSA-hhq4-4pr8-wm27)

Nextcloud Server is prone to an incorrectly-resolved name or reference vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

GHSA-HV5J-3H9F-99C2 vulnerabilities

Vulnerabilities for packages: ruby...

GHSA-FG7X-G82R-94QC vulnerabilities

Vulnerabilities for packages: ruby...

MAL-2023-840 Malicious code in tdv2-applet-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44d9f0f475f31c69d603b6953d97d1b896179620b901a811fd032be0a22d9003 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-sports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a36f3d3c020e8060abbc0f642934bed99c8594f79b7306030d885b0bd3a838d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...