CVE-2022-2119 OFFIS DCMTK Path Traversal

OFFIS DCMTK's All versions prior to 3.6.7 service class provider SCP is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution...

CVE-2022-23170 SysAid - Okta SSO integration

SysAid - Okta SSO integration - was found vulnerable to XML External Entity Injection vulnerability. Any SysAid environment that uses the Okta SSO integration might be vulnerable. An unauthenticated attacker could exploit the XXE vulnerability by sending a malformed POST request to the identity...

The vulnerability of the WebApp Provider component in Google Chrome and Microsoft Edge allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WebApp Provider component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Sysaid Technologies SysAid 代码问题漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. SysAid - Okta SSO integration suffers from a security vulnerability that originates from an unauthenticated attacker being able to exploit an XXE vulnerability by sending a mis-formatted POS...

Chromium: CVE-2022-2161 Use after free in WebApp Provider

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

The vulnerability of the network provider for Kubernetes based on OVN (Open Virtual Network) OVN-Kubernetes is related to insufficient input validation. This allows attackers to exploit the protected information or exert other unauthorized actions.

The vulnerability of the network provider for Kubernetes based on OVN Open Virtual Network involves insufficient input validation. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or carry out other malicious actions...

DoS through large manifest files in Argo CD

Impact All versions of Argo CD starting with v0.7.0 are vulnerable to an uncontrolled memory consumption bug, allowing an authorized malicious user to crash the repo-server service. The repo-server is a critical component of Argo CD, so crashing the repo-server effectively denies core Argo CD...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that originates from the reuse of the WebApp Provider after release...

Malicious code in multiplesegmentsprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48ce3cb677969016d45f44ec99b19a4cf03fbfddaa08f3f3cd56773134a344b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @devcrypto/hdwallet-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb6c342f8e6a7cd8a466ebc7792b62d2d49e25941b6962a70b3f7032d9ace8b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-201 Malicious code in @devcrypto/hdwallet-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb6c342f8e6a7cd8a466ebc7792b62d2d49e25941b6962a70b3f7032d9ace8b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-326 Malicious code in @harrysforge/token-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfd47954ee42f44c41fcbdf84b0e583b156ecbd9b04f6b280ad4fd16b1c355a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @harrysforge/token-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfd47954ee42f44c41fcbdf84b0e583b156ecbd9b04f6b280ad4fd16b1c355a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6322 Malicious code in strapi-provider-upload-aws-s3-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1d24b53a4fdd8c047f1239905fddd51ae8f1cb40bc6e5de7f014a3c4d9595aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in strapi-provider-upload-aws-s3-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1d24b53a4fdd8c047f1239905fddd51ae8f1cb40bc6e5de7f014a3c4d9595aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in os-wallet-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 809a0f7159a18eb447e3b374144112c1066ceb931be5dd5231cb4532c4dfcdbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5126 Malicious code in os-wallet-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 809a0f7159a18eb447e3b374144112c1066ceb931be5dd5231cb4532c4dfcdbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-config-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6245de88dda255b54977801c4cb54ca206cf3e832670277220fba95bf3707455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4881 Malicious code in node-config-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6245de88dda255b54977801c4cb54ca206cf3e832670277220fba95bf3707455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-683 Malicious code in @uc-maps/provider-google.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b2ee3e9a228c29b1fa9a48eab565e4eee93260225f30d535417f36ee2b48d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...