Malicious code in @lognex/ecom-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0ab65eb1c1e53ad84ab09e9426d718197e6137500c81a66639f4e4249e39edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fibo-num (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69de88aac3d36d27f45dcf96193e35f6431e34fb681103b540430fda434bd659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tari_wallet_ffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58ad37d363a37a8ab9bf54a878d2953d20ff4dfb6f2ac7e1c49f9216ac7a97f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mpesa_listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e199077f87759b128b0a7c55634d5244e7a755733448a075a8de1d9307e284d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-46814

A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM...

Malicious code in ory-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10ee2bc9e167728f46f301228a2569bcd7eda2f19c27f24784dd4497cf1af3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kratos-nextjs-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002a702a76a5afe71ba598cb987b7d8cb8624bd74161c63a0e642fb288083bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in autocomplete-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9655da8503f9549c9411d13c7b5306dd5b29247b41ee5857561d74aa7c118dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mxtorie-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fedc7ad7359a3d2943f91008333517119b1cb29a70bd4e98c198f052229e62e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in autocomplete-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3d22342c939ff5ef11bdb6b41a359ac46d2ba5e348d89c27cb5b66b5518f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xpub-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc3e9ded369fe8fed74a7f23ab0c33cbbda2a1e16aab8c2283faba59903c49d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jobserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9a3f4c56d2d25a9e529920ede4e63774b1ced1be3c790f4c8cdf2b9bf495084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ifl-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a78e3ac1b585e32b8d93d41fa60e308981f4af36c1b67dedfe093df78770d540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b919f598c91daf62eb8ac34de91c6290cd75d798de1ea5f7b9c3690cab44d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in schibsted-ufo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a28167ab8729dd1bbb8263b5862e431e6df15135343db190e75aab652e104eea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oasis-os-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6498095a1cca97f72b428b0ee87d8238a47478af4af6bb1c0519386b5a26247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-38043

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service DoS condition on the user machine and, in some cases, resulting in a full...

Design/Logic Flaw

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service DoS condition on the user machine and, in some cases, resulting in a full...

AVEVA Operations Control Logger Security Vulnerability

AVEVA Operations Control Logger is a control center for the UK's Jianwei Software AVEVA. It provides access across local and cloud applications. A security vulnerability exists in AVEVA Operations Control Logger that stems from an escalation of privilege vulnerability that could allow an...

CVE-2023-38544

A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system...