CVE-2022-38885

The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

PT-2022-25373 · Pypi · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-urls package for Python, distributed on PyPI. The democritus-networking package is also identified as a potential code executio...

MGASA-2022-0328 Updated zlib packages fix security vulnerability

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...

BELL-CVE-2021-3735

Bulletin has no description...

Ubuntu: Security Advisory (USN-3489-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-28424

This affects all versions of package s3-kilatstorage...

py-flask-security -- user redirect to arbitrary URL vulnerability

Snyk reports: This affects all versions of package Flask-Security. When using the getpostlogoutredirect and getpostloginredirect functions, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerabilit...

CVE-2020-7677

This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization...

GHSA-CJ7V-27PG-WF7Q vulnerabilities

Vulnerabilities for packages: druid, spark...

MGASA-2022-0248 Updated ruby-git packages fix security vulnerability

Command Injection via git argument injection CVE-2022-25648...

MAL-2022-654 Malicious code in @tinkoff-react-bui/highlighter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f35ba0953c3d1b55af3ac66481e856e15f84300b58641282f67339e9fa1bbb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-275 Malicious code in @flameshot/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8bbca4a9cd0a35a35928860188f38aa877f6edfa6b4eb2b65c110d2d83990bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security fix for the ALT Linux 10 package php8.2 version 8.1.7-alt1

June 16, 2022 Anton Farygin 8.1.7-alt1 - 8.1.6 - 8.1.7 Fixes: CVE-2022-31626, CVE-2022-31625...

MGASA-2022-0227 Updated docker-containerd packages fix security vulnerability

A bug was found in the containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the 'ExecSync' API. CVE-2022-31030...

GHSA-CQJ8-47CH-RVVQ vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2021-4157 affecting package kernel 5.10.109.1-2

CVE-2021-4157 affecting package kernel 5.10.109.1-2. A patched version of the package is available...

CVE-2022-25634 affecting package qt5-qtsvg for versions less than 5.12.11-3

CVE-2022-25634 affecting package qt5-qtsvg for versions less than 5.12.11-3. A patched version of the package is available...

CVE-2015-3276 affecting package openldap for versions less than 2.4.57-5

CVE-2015-3276 affecting package openldap for versions less than 2.4.57-5. A patched version of the package is available...

CVE-2022-24769 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, ctop, rancher-machine...

CVE-2022-23812

This affects the package node-ipc from 10.1.1 and before 10.1.3. This package contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji. Note: from versions 11.0.0 onwards, instead of having malicious code directly in the sourc...