GHSA-GW2G-HHC9-WGJH vulnerabilities

Vulnerabilities for packages: consul...

GHSA-GW2G-HHC9-WGJH vulnerabilities

Vulnerabilities for packages: consul...

Malicious code in react-nesting-example-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0a6877c514ae49fccfe170b75f8405a65c085e2bb1d3d78b1ce4d44bff375d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Integer overflow

Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achieve buffer overflow and modify memory contents. When a...

CVE-2022-39343 Azure RTOS FileX vulnerable to Buffer Offerflow

Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achieve buffer overflow and modify memory contents. When a vali...

Data leakage between instances in the pooling allocator

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-wh6w-3828-g9qf. For more information see the GitHub-hosted security advisory...

GHSA-8RWR-X37P-MX23 vulnerabilities

Vulnerabilities for packages: openssl, openssl-provider-fips...

GHSA-H8JM-2X53-XHP5 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-H8JM-2X53-XHP5 vulnerabilities

Vulnerabilities for packages: openssl...

MAL-2022-5622 Malicious code in rdocumentation-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5eca1c7e61ad7fe3e9bd189771149eeee1859356b1234ff3c84997abed24031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Duplicate Advisory: Improper Restriction of XML External Entity Reference in pikepdf

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29421, GHSA-ccgm-3xw4-h5p8. Reason: This candidate is a duplicate of CVE-2021-29421. Notes: All CVE users should reference CVE-2021-29421 instead of this candidate. All references and descriptions in this candidate have been removed to...

MAL-2022-456 Malicious code in @nexthink/apollo-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faa168f6a74af14b39193cdea04f9798ab2d20f8ad531d396b5207580e9fc5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-F4P5-X4VC-MH4V vulnerabilities

Vulnerabilities for packages: kubevela...

Grafana Privilege Escalation Vulnerability (GHSA-jv32-5578-pxjc)

Grafana is prone to a privilege escalation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

GHSA-69CH-W2M2-3VJP vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, gitleaks, kubeflow, php-fpmexporter, hey, vt-cli, grpcurl, k3d, terraform-provider-sendgrid...

GHSA-69CH-W2M2-3VJP vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, gitleaks, kubeflow, terraform-provider-sendgrid-fips, kube-state-metrics, php-fpmexporter, hey, vt-cli, grpcurl, k3d, dynamic-localpv-provisioner-fips, kubeflow-fips, terraform-provider-sendgrid...

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8770 more potentially affected by CVE-2022-37603 via loader-utils (>=2.0.0, <=2.0.3)

loader-utils NPM version =2.0.0, =2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

GHSA-4F63-89W9-3JJV vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-4F63-89W9-3JJV vulnerabilities

Vulnerabilities for packages: openssl...

MyBB < 1.8.31 RCE Vulnerability (GHSA-hxhm-rq9f-7xj7)

MyBB is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...