PT-2022-31411

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a missing of node put in the mt2701 wm8960 machine probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions pri...

USN-5495-1: curl vulnerabilities

Harry Sintonen discovered that curl incorrectly handled certain cookies. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 21.10, and Ubuntu 22.04 LTS. CVE-2022-32205 Harry Sintonen discovered that curl incorrectly handled certain HTTP...

Oracle VM VirtualBox Core Component Data Modification Privilege Escalation

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause the system to freeze or, in rare cases, crash...

PT-2022-3603

Name of the Vulnerable Software and Affected Versions Intel and AMD microprocessors affected versions not specified AMD microprocessor families 15h through 18h Description The issue is related to mis-trained branch predictions for return instructions, which may allow arbitrary speculative code...

AAmiles security vulnerability

AAmiles is a machine learning project scanner. AAmiles suffers from a security vulnerability. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

Microsoft Defender for Office 365 receives highest award in SE Labs Enterprise Email Security Services test

In today’s evolving threat landscape, email represents the primary attack vector for cybercrime, making effective email protection a key component of any security strategy.1 In Q1 2022, Microsoft participated in an evaluation of email security solutions, carried out by SE labs—a testing lab focus...

Microsoft Defender for Office 365 receives highest award in SE Labs Enterprise Email Security Services test

In today’s evolving threat landscape, email represents the primary attack vector for cybercrime, making effective email protection a key component of any security strategy.1 In Q1 2022, Microsoft participated in an evaluation of email security solutions, carried out by SE labs—a testing lab focus...

PT-2022-37047

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: ucl hash search, ucl parser process object element, and...

Cisco ASA-X with FirePOWER Services Authenticated Command Injection

This module exploits an authenticated command injection vulnerability affecting Cisco ASA-X with FirePOWER Services. This exploit is executed through the ASA's ASDM web server and lands in the FirePower Services SFR module's Linux virtual machine as the root user. Access to the virtual machine...

PT-2022-3481

Name of the Vulnerable Software and Affected Versions Omron Machine automation controller NX7 series versions 1.28 and earlier Omron Machine automation controller NX1 series versions 1.48 and earlier Omron Machine automation controller NJ series versions 1.48 and earlier Description The issue is...

Malicious code in taf-three-dimensional-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3019ee1a4da6ba81d0721c4cccfd580bc1f3a9f6aeba72ec8270c591dbfc6a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wordpress-element (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79ecc824a1e4a6272bd98835ef5b63a12da07f46574ff97377c2e3f3d605070c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wdcustom-breakpoint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 800bd964dde71fdd866122fcdcfea36706a4a97ef2826bbb6443226f78ccac19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brandtheme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1290fce7617d2cd9677c80ca5c34bdf4a66d8b1cd5a72a5578f15becbd4fbcc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vertx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbd2800877ba20579d3320e441a617dd9097847830f6ddec3000486b98011f73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in carpenter-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b80c64be64124594a8fbe7518c6cdc1a3d6b7708e35da5e78de3a95b896168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skale-ima-owasp-helper-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 018f739b731e235df0faf551ead854b13f12d875c77e8919dd85f7799917d65f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skale-ima-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 441405035dfcd9d82a4d8fdc88a69a64c06e8ddc4a2ee0fe1936d0bc6ad2a23b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o-cookie-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2afb37a96b3b8571839e5b1086cd86c90d681149e61d58ca541b6bc2cf79d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockly-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2113195c9b0e983c65e83e792b256354bbbebb00c39ce09f5e073cfdaa950365 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...