Ubuntu: Security Advisory (USN-5727-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5727-1 linux, linux-aws, linux-aws-hwe, linux-dell300x, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that a race condition existed in the instruction emulator of the Linux kernel on Arm 64-bit systems. A local attacker could use this to cause a denial of service system crash. CVE-2022-20422 It was discovered that the KVM implementation in the Linux kernel did not properly handl...

Denial of Service (DoS)

Overview apple/swift-nio-http2 is a HTTP/2 support for SwiftNIO. Affected versions of this package are vulnerable to Denial of Service DoS. This can be caused by a network peer sending a specially crafted HTTP/2 frame, due to a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSHPROMISE fra...

CVE-2022-43285

Nginx NJS v0.7.4 was discovered to contain a segmentation violation in njspromisereactionjob. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input...

CVE-2022-43285

Nginx NJS v0.7.4 was discovered to contain a segmentation violation in njspromisereactionjob. NOTE: the vendor disputes the significance of this report because NJS does not operate on untrusted input...

NGINX JavaScript 安全漏洞

NGINX JavaScript is an extension to the NGINX open source. A security vulnerability exists in NGINX JavaScript version 0.7.4, which stems from a segmentation violation in the njspromisereactionjob function...

MAL-2022-2845 Malicious code in eslintr-plugzn-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d12cc91465f228b168e2253c5e272020068e0b096983636a3f160b705f92bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslintr-plugzn-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d12cc91465f228b168e2253c5e272020068e0b096983636a3f160b705f92bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spotify-promise-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de122999e6fc807384186ab9aeb6da6a2f5b6e6217255a527c23a60f8bb540c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6261 Malicious code in spotify-promise-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de122999e6fc807384186ab9aeb6da6a2f5b6e6217255a527c23a60f8bb540c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-shim-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54e218545ce301c0d9363cf4a06c32ddf8e75737a2bd1b629a645d6cc00e9777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7289 Malicious code in xo-shim-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54e218545ce301c0d9363cf4a06c32ddf8e75737a2bd1b629a645d6cc00e9777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4871 Malicious code in noblox.js-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d487f82b456e6312362ebfeb58f553f9ce3e67fa0d0dc2bec745aa848ec86367 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noblox.js-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d487f82b456e6312362ebfeb58f553f9ce3e67fa0d0dc2bec745aa848ec86367 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hs-promise-rejection-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b0af78070a71081b60bcff34762e511aa3de9b02147f99ab2b69e87591f500f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3688 Malicious code in hs-promise-rejection-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b0af78070a71081b60bcff34762e511aa3de9b02147f99ab2b69e87591f500f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hs-promise-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2659a740d846b826a9ca67d4a4332aa6822f2bc87dd9cbd77caf57989b98404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3689 Malicious code in hs-promise-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2659a740d846b826a9ca67d4a4332aa6822f2bc87dd9cbd77caf57989b98404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Command Injection

git-promise is vulnerable to command injection. The vulnerability exists in index.js due to an inappropriate fix for another vulnerability which allows an attacker to inject and execute arbitrary commands...

GHSA-CHJ3-F7XW-367M OS Command Injection in git-promise

All versions of package git-promise is vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue. Credits @lirantal for discoveri...