MAL-2022-6791 Malicious code in universal-authenticator-library-js-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 634c9abec0578ad529a15e3faab7ef695e47e5a1b95299329e27a8ca7e00e22f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4083 Malicious code in jubilee-flag-wave (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99ba934904dde0c5fbcf3a66e34df594211986243c5712077ae4ea9ccc6b784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7328 Malicious code in yarn-design-system-logos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9006849a713475d0be0ef3619338ecd191969c2f0a3d9d8d310cd68e292e75a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1966

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

UBUNTU-CVE-2022-1966

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2022-1966

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

MAL-2022-6342 Malicious code in stylis-ifl4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67dee32869e4aa596866719fecd53f70729795c83ebace2b700e3322a45a0434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2770 Malicious code in epic-ue-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7979dce3b3be977cb7f1e59666ccb211221329338f2d557e5f30c3427a98503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3849 Malicious code in insights-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6352a03d6b7118bd6118e06e5a8aec38658ea60ba7ea57fff1425e26eef97b5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Moderate: Red Hat Security Advisory: ACS 3.70 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes RHACS. The updated image includes bug fixes and feature improvements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score...

UBUNTU-CVE-2022-1972

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2078. Reason: This candidate is a reservation duplicate of CVE-2022-2078. Notes: All CVE users should reference CVE-2022-2078 instead of this candidate. All references and descriptions in this candidate have been removed to...

MAL-2022-6067 Malicious code in sg-dome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100290dc9fe774ec3666aaf8b46114c588901ac78d03a51b506faa31a736ba58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2429 Malicious code in depedence-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc8878b8a028e2ab59027e85e1baf0c886fe76a9803d73594baff2df1359a94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5760 Malicious code in resadmin-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed008adae00758920cdf5ee69f42849c4496c5d89739acf8844b174c64db2a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1685 Malicious code in brlc-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d7212ac759445a19263a1bc31ab713414359f0ce212665d53b2b150651a7b34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5636 Malicious code in react-devtools-release-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea7f251efb5b52e9221271c637b06b4d48a22a5c0e762a8723498050b5adf80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1397 Malicious code in azuremediaplayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12ffc5c92710663fe5b679fac46532f7a49df83e0750511ab869d40ddd069fbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6965 Malicious code in volgactf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e462ceb3d8d9ad9d4e861f8e6799066df991e50420b1b5ddc6831cfbe5d4e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-8884 · Form.Io · Form.Io

Name of the Vulnerable Software and Affected Versions: Form.io version 2.0.0 Description: A Server-Side Template Injection SSTI issue was discovered, leading to Remote Code Execution during the deletion of the default Email template URL. The email templating service was removed after 2020. The...

CVE-2022-26746

This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences...