ps.3lib.net Cross Site Scripting vulnerability OBB-2934097

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-25688: Buffer Copy without Checking Size of Input

Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

RHEL 7 : rh-mysql80-mysql (RHSA-2022:6518)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6518 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The...

ps.1lib.vip Cross Site Scripting vulnerability OBB-2896282

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-0851

There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the activation key via the process command line v...

Design/Logic Flaw

There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the password via the process command line via e.g. htop or ps. The specific impact varies upon the...

CVE-2022-29550

An issue was discovered in Qualys Cloud Agent 4.8.0-49. It writes "ps auxwwe" output to the /var/log/qualys/qualys-cloud-agent-scan.log file. This may, for example, unexpectedly write credentials from environment variables to disk in cleartext. NOTE: there are no common circumstances in which...

CVE-2022-29550: Insertion of Sensitive Information into Log File

An issue was discovered in Qualys Cloud Agent 4.8.0-49. It writes "ps auxwwe" output to the /var/log/qualys/qualys-cloud-agent-scan.log file. This may, for example, unexpectedly write credentials from environment variables to disk in cleartext. NOTE: there are no common circumstances in which...

ps.3lib.net Cross Site Scripting vulnerability OBB-2825190

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

USN-5237-1 libmediainfo vulnerabilities

It was discovered that MediaInfoLib incorrectly handled certain specially crafted files. An attacker could possibly use this issue to cause a denial of service. CVE-2020-26797 It was discovered that MediaInfoLib incorrectly handled certain specially crafted MpegPs files. An attacker could possibl...

psps.uni-bremen.de Cross Site Scripting vulnerability OBB-2818729

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in ps-brands-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2157cfaf0f3a46fd498a20e0ed9db4f95c772c753bf21ebd49d591149b7186a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-asymmetric-crypts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf882c658f1baddb43132fc9afceef3308ff5f31f6cbf3acfc4fa245b451a01d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-request-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 554463840ce09aa2698a9337ad6057d03c545cf3414cce6cf82c6f703a305975 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99c8315c3edd20e2322aa14237ecde5a97bc740f633f94d73bb92bfa87bf39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29a4dad53fa20e397c9d6fec72443b8465639a83bd580c0228e42a08a849a32e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5503 Malicious code in ps-request-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 554463840ce09aa2698a9337ad6057d03c545cf3414cce6cf82c6f703a305975 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5498 Malicious code in ps-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29a4dad53fa20e397c9d6fec72443b8465639a83bd580c0228e42a08a849a32e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5502 Malicious code in ps-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99c8315c3edd20e2322aa14237ecde5a97bc740f633f94d73bb92bfa87bf39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-crypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3344ece704cd154a5d31406e030fcde233dcb88e1b8c72f5790bb4e9d1aa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...