Malicious code in @infra-node/kconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3341ab770df7cdc186d05edf516f69e19e6d5dc2e288e245a0011264ca23b77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-358 Malicious code in @infra-node/kconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3341ab770df7cdc186d05edf516f69e19e6d5dc2e288e245a0011264ca23b77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2280 Malicious code in custdev-sapui5-infra-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e19031212e3c4af860f8d016c8df106f9c7f9f78fca4f991735c39b88398b4e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in custdev-sapui5-infra-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e19031212e3c4af860f8d016c8df106f9c7f9f78fca4f991735c39b88398b4e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Infiray IRAY-A8Z3 1.0.957 Code Execution / Overflow / Hardcoded Credentials

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Infiray IRAY-A8Z3 thermal camera vulnerable version: V1.0.957 fixed version: None CVE number: CVE-2022-31208, CVE-2022-31209,...

The vulnerability of the Business Logic Infra SEC component of the JD Edwards EnterpriseOne Tools system for managing enterprise resources allows a perpetrator to gain access to data or cause service interruptions.

The vulnerability of the Business Logic Infra SEC component of the JD Edwards EnterpriseOne Tools system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain read access to data or cause service failures through HTTP requests...

MAL-2022-236 Malicious code in @epc-infra/app-lookup-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bbe84e4aa37a9b2484d307db5f4e3ac6dc202acbd2d528d2949bd1c1ce0e43c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/dynamo-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d45f7863b32e8818b117c91b3f213e270acfa8104a223f2ad0ede0cfadf83e53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/dns-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 899932fc30250267552612a2fb30eb0b139b8e3503774b1fddddf95b65f6c618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/stack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d37356aab514ee977ba45a8e6b7004158d85893c2f6d5544314656f41789348b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-241 Malicious code in @epc-infra/region-only-policy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03aeca5ad9dc6bebb0249d07c948fc2913ba7b25fdc41cea4a5c78c8bf672958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/region-only-policy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03aeca5ad9dc6bebb0249d07c948fc2913ba7b25fdc41cea4a5c78c8bf672958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-239 Malicious code in @epc-infra/dns-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 899932fc30250267552612a2fb30eb0b139b8e3503774b1fddddf95b65f6c618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-242 Malicious code in @epc-infra/stack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d37356aab514ee977ba45a8e6b7004158d85893c2f6d5544314656f41789348b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/clinstestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9960278b8fe842784b23bfe1b25691881cd6b765f159735025d6709ad0ef8dd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/users-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf73169208787ddafa275f2837c6596a96541a2c4b1526a4cdd468678bfa4e47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-21464

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Business Logic Infra SEC. The supported version that is affected is Prior to 9.2.6.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

CVE-2022-21464

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Business Logic Infra SEC. The supported version that is affected is Prior to 9.2.6.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

CVE-2022-21464

CVE-2022-21464 affects Oracle JD Edwards JD Edwards EnterpriseOne Tools (component: Business Logic Infra SEC). Affected versions are Prior to 9.2.6.3. An unauthenticated, network-accessible attacker over HTTP can cause a hang or repeatable crash (DOS) and may read a subset of EnterpriseOne Tools ...

CVE-2021-1231

A vulnerability in the Link Layer Discovery Protocol LLDP for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, adjacent attacker to disable switching on a small form-factor pluggable SFP interface. This vulnerability is due to...