Path Traversal

gravitee-gateway-core is vulnerable to path traversal. The vulnerability exists due to the lack of dynamic routing checks in the selectUserDefinedEndpoint function of TargetEndpointResolver.java, allowing an attacker to read arbitrary files outside the expected directory via a...

CVE-2022-34652

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

MAL-2022-6744 Malicious code in uglpti9f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5708a7125d246cbcfa82d8f0b5ce76a91aab70187c166c079cc4a0560ec7e07d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6219 Malicious code in source-ap-loadper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c64fb7bcacaa0461053677e4841fec7a6863289b2d9b0e98e106d8acfab883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4359 Malicious code in lodash.isstgrng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f50f2c79db7fe5aea1e947df08491dd654c6d5c32ab035ca9f2a270839b024bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4071 Malicious code in jsoescheam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14db4656315828c21256fbc1841267536753ba32a1039210c60fd7729715d269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4850 Malicious code in ni5b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35822602157cd00094fc0c3ebf463212a05585c5eed8a1b66f8429c43090f974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3496 Malicious code in gugpconilict (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84188b6003cc02f272b6ce963d87bd147f3511bb03734887e326ba8f356fcf66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3395 Malicious code in glpsass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb351e3ce5b04603345afe67d08ac13b242fabc9f9e61025dea11a389de65c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3500 Malicious code in guljshint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2631200c464ded493243d1cae6422ded696465305c19a3bb1ef0406cc5299b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3517 Malicious code in gulpposgcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adaf6ec197a9663a551044594d55fceed77cf79de1c75b9a49b4b471d3eb6455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3035 Malicious code in filtetypg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 386be135d7d378dab9967817aa48e57a21ec4e686432ae7b9f517e9e75bfa7b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2844 Malicious code in eslintpwuginjest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6112b771f7ac6d517b8835b1bd113b2cd789e30bf812fab609d48b9e0a15abd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1440 Malicious code in babenlcodre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7941a1e2039b470b3c69fd6f369c6b6b1ffa5610de00611d7479770a51180858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DSA-5212-1 chromium - security update

Bulletin has no description...

Moodle Incorrect Authorization vulnerability

In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course...

CVE-2020-1756

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool...

CVE-2022-35452

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0b2c...

CVE-2022-35010

PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asaninterceptorsmemintrinsics.cpp...

MAL-2022-6211 Malicious code in some-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93e3e8aded4487aae11e3a9234ede51d925be788d5d20133f908adb9c2f8bea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...