Malicious code in invairant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b122d04889a29a7d294f43451ea01c605d7f9bfcc1f98f86024c69b8007b2a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-contrib5-cop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcaed4f8e5074c4986a639e08d41128df82425a2ecf9086e67025287e52d1564 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in content-tep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8ff2832379350eee368aa48f6145f678929ced04843d9e5526597e8ca6a35cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rawoader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394b28028a1468e99b7aa88c13b6f076a880557557828f7af2c1984102127348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odashes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc92b2f82fd895fd66598ba50fff6e0c77ee613b3c157b32577d9d5c8470929d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in possnested (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5499bf98d70d34501138bf621598f52c8d37bd13386e067ef0f46d7e030468a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcssfvlgexugsfixes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39897524ed2b285ac6faa5e1db086649824026c37cb36266d3181dda6db746da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gurbpautroprefixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 489480b989f68da16b494bb2a489a29798ec5845edb832c40665d642ea08d9a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in guljshint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2631200c464ded493243d1cae6422ded696465305c19a3bb1ef0406cc5299b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fieloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da7a179a6c43b3762370305347b1fec848aef633e19672c989e18676969fc331 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fuirebagseadmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f17847db0ad2df972b996bae94ebf155fcb4bbbba3e23aa23987ce8ca85823 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babeeopresetstage0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb48d42ad63d09ef1ac0868e76568b5e07906e548889f67d0d017a57a2dd757d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rchive-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46bcff2ccf671339cf65674ae082d163bd033ef8b52b3c605c74834fb6d5f441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-2793: Missing Support for Integrity Check

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol...

CVE-2022-2789: Insufficient Verification of Data Authenticity

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, and can display logic that is different than the compiled logic...

CVE-2022-2790: Improper Verification of Cryptographic Signature

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347 Improper Verification of Cryptographic Signature, and does not properly verify compiled logic PDT files and data blocks data BLD/BLK files...

CVE-2022-2792: Improper Access Control

Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284 Improper Access Control, and stores project data in a directory with improper access control lists...

CVE-2022-2788: Path Traversal: '\..\filename'

Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering...

Frontier input validation vulnerability

Frontier is an EtherCompatible layer for Substrate. It is used to run unmodified Ethernet Dapps. Frontier suffers from an input validation error vulnerability that stems from the fact that it can affect the parsing of RPC results in the event of EVM recovery. In the release version, this causes t...

PT-2022-18671 · Emerson Electric · Proficy Machine Edition

Name of the Vulnerable Software and Affected Versions: Emerson Electric's Proficy Machine Edition versions 9.00 and prior Description: The issue concerns insufficient verification of data authenticity, which can cause the software to display logic that differs from the compiled logic...