MAL-2022-4579 Malicious code in mflxtioqpeahbkzk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 538288efbc33c56624c40f86312ca7f5c45fd3c2770eac666f58877fbda1f0ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VMSA-2022-0018:VMware vCenter Server updates address a server-side request forgery vulnerability

Advisory ID: VMSA-2022-0018 CVSSv3 Range: 5.3 Issue Date:2022-07-12 Updated On: 2022-07-23 CVEs: CVE-2022-22982 Synopsis: VMware vCenter Server updates address a server-side request forgery vulnerability CVE-2022-22982 RSS Feed Download PDF Download Text File Share this page on social media: 1...

"Failed to import signatures" - Veeam Intelligent Diagnostic Signatures Update Failure

Challenge Attempting to update Veeam Intelligent Diagnostics signatures fails, and a pop-up appears with the message: Failed to import signatures Cause This issue occurs due to recent certificate changes that affected the Veeam Intelligent Diagnostics signature update process. Solution Option 1:...

CVE-2021-43116

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...

MAL-2022-4890 Malicious code in node-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e48deb4e94109fe1c6aa6462bcd840fba34d7a47198045030885d6e0f85931a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Authentication

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...

Remote Code Execution (RCE)

openssl is vulnerable to remote code execution. The vulnerability exists due to the improper RSA implementation of AVX512IFMA instructions in X8664 CPUs, allowing an attacker to crash the application by providing a malicious input...

GO-2022-0414 Command injection in github.com/Masterminds/vcs

Passing untrusted inputs to VCS functions can permit an attacker to execute arbitrary commands. The vcs package executes version control commands with user-provided arguments. These arguments can be interpreted as command-line flags, which can be used to perform command injection...

GO-2022-0422 Panic when decoding invalid blocks in github.com/ipld/go-codec-dagpb

The dag-pb codec can panic when decoding invalid blocks...

GO-2022-0462 Improper validation of client certificates in github.com/pion/dtls/v2

Client-provided certificates are not correctly validated, and must not be trusted. DTLS client certificates must be accompanied by proof that the client possesses the private key for the certificate. The Pion DTLS server accepted client certificates unaccompanied by this proof, permitting an...

CVE-2022-2057

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

Denial Of Service (DoS)

libdcmtk.so is vulnerable to denial of serviceDOS attacks. The vulnerability exists due to improper handling of memory-free property when parsing data, which allows an attacker to exhaust memory resources and crash the system via a maliciously crafted request...

GSD-2022-1004008 dm stats: add cond_resched when looping over entries

dm stats: add condresched when looping over entries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.282 by commit...

GSD-2022-1003921 x86/delay: Fix the wrong asm constraint in delay_loop()

x86/delay: Fix the wrong asm constraint in delayloop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003908 regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt

regulator: pfuze100: Fix refcount leak in pfuzeparseregulatorsdt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003884 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003644 dm stats: add cond_resched when looping over entries

dm stats: add condresched when looping over entries This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.120 by commit...

GSD-2022-1003396 scsi: lpfc: Fix call trace observed during I/O with CMF enabled

scsi: lpfc: Fix call trace observed during I/O with CMF enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003158 ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()

ath11k: fix the warning of devwake in mhipmdisabletransition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003035 Input: sparcspkr - fix refcount leak in bbc_beep_probe

Input: sparcspkr - fix refcount leak in bbcbeepprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...