2486 matches found
Malicious code in ok-messenger-model (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7bcdfc9b070b703c4308d68ecabf68a9973d878d832021df11f5fd788327178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-811 Malicious code in ac-animation-sequencer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7595dea4b4bf14edbd22f889a9d64c68692b172c8ffbbc5684b3903c81aeafd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @tinkoff-react-bui/input-amount (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 994a0a8ffc92c84a5dead72060244e1408f9bdd16a86a402bdcd3e044bf7c29e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in whitesourcepublisher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48c073a25fc6221d6cf9c2eafcb7e477d226299a5b6556e7768ca8ed7933a4f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Siemens SINEMA Remote Connect Server身份验证错误漏洞
SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.An authentication error vulnerability exists in Siemens SINEMA Remote Connect Server, which could be...
Adobe Dimension Installed (macOS)
Binary data macosadobedimensioninstalled.nbin...
The vulnerability of the Kiosk mode implementation in Siemens SIMATIC software allows a intruder to enhance their privileges.
The vulnerability of the Kiosk mode implementation in Siemens SIMATIC software products is related to insecure resource initialization. Exploiting this vulnerability can allow attackers to enhance their privileges by opening the printer’s dialog box in the vulnerable application, even if the...
Out-of-Bounds Read
thunderbird is vulnerable to out of bounds read. A locally-installed hostile program could send WMCOPYDATA messages which the library incorrectly processes, leading to an out-of-bounds read...
Android apps with millions of downloads exposed to high-severity vulnerabilities
Microsoft uncovered high-severity vulnerabilities in a mobile framework owned by mce Systems and used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote albeit complex or local attacks. The vulnerabilities, which affected apps...
Android apps with millions of downloads exposed to high-severity vulnerabilities
Microsoft uncovered high-severity vulnerabilities in a mobile framework owned by mce Systems and used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote albeit complex or local attacks. The vulnerabilities, which affected apps...
RHEL 8 : thunderbird (RHSA-2022:4770)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:4770 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.9.1. Security Fixes: Mozilla:...
GHSA-79XR-V794-WQ35 MunkiReport Managed Installs module Reflected Cross-Site Scripting (XSS) vulnerability
A Cross-Site Scripting XSS vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters through which installed packages names and versions are reported...
GHSA-MQR8-3V8J-46WV Missing Authorization in Jenkins Configuration as Code Plugin
Missing permission checks in Jenkins Configuration as Code Plugin 1.24 and earlier in various HTTP endpoints allowed users with Overall/Read access to access the generated schema and documentation for this plugin containing detailed information about installed plugins...
Utilizing the Adaptive Defense Model Against Information Stealers
Trellix Global Defenders: Utilizing the Adaptive Defense Model Against Information Stealers By Taylor Mullins · May 23, 2022 Trellix is continuing to observe the continued growth in usage and general availability of Information Stealers that have the functionality to collect passwords, cookies,...
SUSE SLES12 Security Update : openldap2 (SUSE-SU-2022:1685-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:1685-1 advisory. - CVE-2022-29155: Fixed SQL injection in back-sql bsc1199240. Tenable has extracted the preceding description block directly from the SUSE...
Adobe InCopy Installed (macOS)
Binary data adobeincopymacinstalled.nbin...
Cross-site Request Forgery (CSRF)
org.keycloak:keycloak-installed-adapter is vulnerable to cross-site request forgeryCSRF. A local attacker is able to cause denial of service conditions because OIDC logout endpoint does not have any CSRF protection configured...
Patch Management: HCL BigFix Get Installed Packages
Binary data hclbigfixgetpackages.nbin...
Google Android Information Disclosure Vulnerability (CNVD-2022-44552)
Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in Google Android, which stems from a side-channel information disclosure that could compromise installed packages. An attacker could exploit the vulnerability to cause a...