@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +67 more potentially affected by CVE-2022-22984 via snyk-sbt-plugin (>=1.0.2, <=2.15.0)

snyk-sbt-plugin NPM version =1.0.2, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =0.0.2, =0.0.7, =1.0.1 - @ericblade/quagga2-redux-middleware 1.0.1 and more Source cves: CVE-2022-22984 Source advisory: MEND:CVE-2022-22984...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +84 more potentially affected by CVE-2022-22984 via snyk (>=0.5.0, <=1.954.0)

snyk NPM version =0.5.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =1.6.0, =1.1.0, =1.0.1, =1.0.2, =1.0.16 and more Source cves: CVE-2022-22984 Source advisory: MEND:CVE-2022-22984...

PT-2025-40734

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified within the netdevsim module of the Linux kernel, specifically in the nsim drv probe function. This leak occurs when nsim dev resources register fails during...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 to version 6.0.3 or higher. References - Dotnet Announcement -...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement -...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 to version 6.0.3 or higher. References - Dotnet Announcement...

DEF CON 30. Hacking EFBs. Engine Performance

At DEF CON 30 this year we demonstrated some vulnerabilities in electronic flight bags and the potential impact on flight safety. There’s plenty more detail of EFB security issues here. As part of the Aerospace Village at DEF CON 30, we invited people to fly our flight sim under instruction from...

searchstax-simulator-crawler (>=0.0.1a22, <=0.0.1a23) potentially affected by CVE-2022-36359 +1 more via django (1.8.13)

django PYPI version 1.8.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - searchstax-simulator-crawler =0.0.1a22, =0.0.1a23 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

Malicious Package

Overview amplify-category-api-dynamodb-simulator is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Malicious code in amplify-category-api-dynamodb-simulator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8891bc9b89c5f04d865d23a8aaaa496f59bde6cca82becce21df120ddd894b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-976 Malicious code in amplify-category-api-dynamodb-simulator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8891bc9b89c5f04d865d23a8aaaa496f59bde6cca82becce21df120ddd894b9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34643

RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessing memory...

CVE-2022-34642

The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect mask which can cause a Denial of Service DoS...

CVE-2022-34643

RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessing memory...

CVE-2022-31537

The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31537

The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Solar-system-simulator path traversal vulnerability

Solar-system-simulator is a simulator of the motion of planets and moons by Jason McGinty, an individual developer in the United States. A security vulnerability exists in Solar-system-simulator version 2021-07-26 and earlier, which stems from an incorrect call to Flask's sendfile function that...

CVE-2022-31537: Improper Limitation of a Pathname to a Restricted Directory

The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20808

Name of the Vulnerable Software and Affected Versions jmcginty15/Solar-system-simulator versions prior to 2021-07-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-07-26, consider restricting...

gps-sdr-sim security vulnerabilities

gps-sdr-sim is a software-defined GPS signal simulator from the individual developers of OSQZSS in Japan. A security vulnerability exists in gps-sdr-sim v1.0, which stems from a buffer overflow when parsing long command line arguments, resulting in a denial of service or code execution...