Malicious code in dataminr-instrument (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92d29ec68696fa0098daae652b7409753515de66ad175e97545cf2e8e58e41fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

CVE-2022-34396

Dell OpenManage Server Administrator OMSA version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated...

CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

Design/Logic Flaw

Dell OpenManage Server Administrator OMSA version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated...

CVE-2022-34396

Dell OpenManage Server Administrator OMSA version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated...

CVE-2022-34396

Dell OpenManage Server Administrator OMSA version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated...

CVE-2022-45100

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Validation vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to a full compromise of the system...

CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

CVE-2022-45099

Dell PowerScale OneFS (versions 8.2.x–9.4.x) contains a weak encoding for the NDMP password. This local, privileged-access vulnerability could allow a full system compromise. Mitigations from PT-2022-6324 include disabling the NDMP password feature until a patch is available, restricting privileg...

PT-2023-14604 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.3.x Description: The issue is related to an improper certificate validation, which could be exploited by a remote unauthenticated attacker. This exploitation could lead to a full compromise of th...

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS, a Dell USA company that provides the PowerScale OneFS operating system for scale-out NAS, has a weak encryption vulnerability that could be exploited by a local attacker with privileges to compromise the entire system...

Malicious code in dpcf-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eff0ca3f36919d30bca5c57b0c42fd6bb21fe6d7bf5370806a538d228a691f87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-sendlinksms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33f280c3a000e1320bbd63fa8405b2dce27f6e488ae3557bb02a19394f76bdc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in supchat-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f04d9db61e2308e216a2c5778585400d2e4ef0a6c127575e7cc6a92a625e37d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in proxy-stub-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eab7b2cd38fda0244b8fd8d667252f0874393d890662d57aad3c71364a8d9bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-jquery2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55d521035684c4dbe2c48fd0ee90ce405fbfb292a771e6c278ad707668d648a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lego-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f68048b64d2f636d41c97edba1631e654e4141f21d4b318622cc529eb5197ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fiji-svg-sprite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb73bfc870df2d61553a74978910662d4cbfc26990235761e59fb780c377c650 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...