XWiki 8.0 < 13.10.5, 14.0 < 14.3 User Registration Vulnerability (GHSA-h5j3-5x63-p8jv)

Xwiki is prone to a user registration vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...

XWiki < 13.10.4, 14.0 < 14.2 Authentication Bypass Vulnerability (GHSA-8h89-34w2-jpfm)

Xwiki is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

GHSA-47m6-46mj-p235: By-passing Cross-Site Scripting Protection in HTML Sanitizer

Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C 5.7 Problem Due to a parsing issue in upstream package masterminds/html5, malicious markup used in a sequence with special HTML comments cannot be filtered and sanitized. This allows to by-pass the cross-site scripting mechanis...

MAL-2022-3911 Malicious code in internallib_v900 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b444ce60e2348e602dc655ad88d7db0e56e3c5f7b2678bfa26154dbab981222 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3878 Malicious code in internallib_123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b1422905ccc2130b6c7069e69a3addae1ef96e39e14de364209f65a2eb6f7ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XWiki < 13.10.4, 14.0 < 14.2 Information Disclosure Vulnerability (GHSA-599v-w48h-rjrm)

Xwiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

GHSA-FJ2M-W3WV-X9PR vulnerabilities

Vulnerabilities for packages: trino...

Opencast < 9.10, 10.x < 10.6 Log4j RCE Vulnerability (GHSA-mf4f-j588-5xm8, Log4Shell)

Opencast is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

XWiki 11.3.7 < 13.10.4, 14.0 < 14.2 Privilege Escalation Vulnerability (GHSA-g4h6-qp44-wqvx)

Xwiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescripti...

GHSA-C4R9-R8FH-9VJ2 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...

Grafana Image Renderer Vulnerability (GHSA-2cfh-233g-m4c5)

Grafana is prone to a vulnerability in Grafana Image Renderer. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

GHSA-GP7F-RWCX-9369 vulnerabilities

Vulnerabilities for packages: dotty...

GHSA-GP7F-RWCX-9369 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

Malicious code in winrpcexploit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46976ed2bca7738154d7f53ebb0e98864eafcf5753fc7753b509c6ce4d9ac9b4 Security researchers at Check Point Research discovered a malicious package called WINRPCexploit. PyPI has since removed WINRPCexploit...

Malicious code in alexhostx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73f7b0bdadd7c2cbda6f78c816e3a95364e9fa57e28228da281a2ffa393cc8c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vuez-template-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faf4115988e70fed761d8f3611ce6b309fa2efe3560f15a0a66e9471e34fe3b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6337 Malicious code in style-componenx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb248124090511a5f3edf33939c7877e6c001e2305b954ec69b81df52fbd63dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tinhcyxolor2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1785ffaf0cf123331ff5d3e407a7290b6407ef4bd4d6a1d949bc1efb235a8a60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sanitize-figlgname (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca5849d98166b6a940b4358ec6234c96c72b43cb608091c1a443d1a8512fa99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sint-plugin-prkomise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92604a6c1cf3f8e7444a92b0663c0b7cdb89fd4cde855bf03b8f7a64cb15d82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...