SUSE: Security Advisory (SUSE-SU-2022:2164-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2158-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial of Service (DoS) vulnerability in RSSHub

Impact Passing some special values to the filter and filterout parameters can cause an abnormally high CPU. Impact on the performance of the servers and RSSHub services. Patches It is fixed in 5c4177441417b44a6e45c3c63e9eac2504abeb5b , please update to this or the later versions as soon as...

OPENSUSE-SU-2022:10023-1 Security update for tor

This update for tor fixes the following issues: tor was updated to 0.4.7.8: Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious...

CVE-2022-34191

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34191

CVE-2022-34191 refers to a stored XSS vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin, affecting version 4.8.0.77 and earlier. The issue arises because the plugin does not escape the name of NetStorm Test parameters on views that display parameters, enabling an attacker wi...

[SECURITY] Fedora 36 Update: collectd-5.12.0-16.fc36

collectd is a daemon which collects system performance statistics periodically and provides mechanisms to store the values in a variety of ways, for example in RRD files...

CVE-2022-34191: Improper Neutralization of Input During Web Page Generation

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Jenkins Plugin NS-ND Integration Performance Publisher Cross-site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins NS-ND Integration Performance...

Virtuozzo Hybrid Infrastructure 5.1 Update 1 (5.1.1-61)

This update provides bug fixes and improvements. Vulnerability id: VSTOR-54473 The network orchestration service does not restart after an update. Vulnerability id: VSTOR-54265 Fixes the root cause of the alert "Cluster had blocked or slow replication." Vulnerability id: VSTOR-54066 Fixes the...

Citrix Hypervisor: ACPI Warning: Incorrect checksum in table [BGRT]

hostxxxx kernel: 9.091668 ACPI BIOS Warning bug: Incorrect checksum in table BGRT - 0x2B, should be 0x9C 20180810/tbprint-177...

Malicious code in md-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d6d5be3f70190aacf0f23190e1e0da484a2a9d3df619cf872b9ade12ed5f30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4524 Malicious code in md-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d6d5be3f70190aacf0f23190e1e0da484a2a9d3df619cf872b9ade12ed5f30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6850 Malicious code in usaa-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f74974b841768a8f7cc9be0179b03462de9e741bff43976bfcc8ddfc25e6e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f74974b841768a8f7cc9be0179b03462de9e741bff43976bfcc8ddfc25e6e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6923 Malicious code in videoplayershakaperformancelogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d2832b7b40b0f81bcf38feb52c26aec84528baf1093cc1850d4319af3cd6d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eleventy-high-performance-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4823110842e58cb338449a76f8f597545384ae9c5015c7acd466f5fcbdf1090e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2698 Malicious code in eleventy-high-performance-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4823110842e58cb338449a76f8f597545384ae9c5015c7acd466f5fcbdf1090e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58c31e90a2d18fa00fa8667905444ac65828ede2b1cf6db09888804b7b191cd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3062c1010daff0de3ecd9277566c8551bd36d82069cdd22ab4f121499b540f46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...