MAL-2023-779 Malicious code in skip-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bd0d1ba40fe0bcfb78cdaa557309ff0a4c113dc2bedd58f36622850efeacf3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 8 : kpatch-patch (RHSA-2020:4331)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4331 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

RHEL 8 : kpatch-patch (RHSA-2020:4332)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4332 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

RHEL 7 : kpatch-patch (RHSA-2020:5050)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5050 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Security Fixe...

PT-2023-10244 · Unknown · Aenbleidd Find

Name of the Vulnerable Software and Affected Versions: AenBleidd FiND affected versions not specified Description: A critical vulnerability was found in AenBleidd FiND, affecting the init result function of the file validator/my validator.cpp. The manipulation leads to buffer overflow...

CVE-2015-10065: Buffer Copy without Checking Size of Input

A vulnerability classified as critical was found in AenBleidd FiND. This vulnerability affects the function initresult of the file validator/myvalidator.cpp. The manipulation leads to buffer overflow. The patch is identified as ee2eef34a83644f286c9adcaf30437f92e9c48f1. It is recommended to apply ...

CVE-2021-4295

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

CVE-2021-4295

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

Xxe

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

CVE-2021-4296

A vulnerability, which was classified as problematic, has been found in w3c Unicorn. This issue affects the function ValidatorNuMessage of the file src/org/w3c/unicorn/response/impl/ValidatorNuMessage.java. The manipulation of the argument message leads to cross site scripting. The attack may be...

CVE-2021-4295

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

CVE-2021-4295 ONC code-validator-api XML CodeValidatorApiConfiguration.java vocabularyValidationConfigurations xml external entity reference

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

CVE-2021-4295

ONC code-validator-api (versions up to 1.0.30) contains an XML External Entity (XXE) issue in vocabularyValidationConfigurations of CodeValidatorApiConfiguration.java. The vulnerability allows external entity reference manipulation and is addressed by upgrading to version 1.0.31. The linked patch...

PT-2022-11751 · Unknown · Onc Code-Validator-Api

Name of the Vulnerable Software and Affected Versions: ONC code-validator-api versions up to 1.0.30 Description: A vulnerability was found in the ONC code-validator-api, affecting the vocabularyValidationConfigurations function of the XML Handler component. The issue leads to an xml external enti...

CVE-2021-4295: Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in ONC code-validator-api up to 1.0.30. This vulnerability affects the function vocabularyValidationConfigurations of the file src/main/java/org/sitenv/vocabularies/configuration/CodeValidatorApiConfiguration.java of the component XML Handler. T...

PT-2022-11755 · W3C · W3C Unicorn

Name of the Vulnerable Software and Affected Versions: w3c Unicorn affected versions not specified Description: A problematic issue has been found in w3c Unicorn, affecting the function ValidatorNuMessage of the file src/org/w3c/unicorn/response/impl/ValidatorNuMessage.java. The manipulation of t...

code-validator-api Code-related vulnerabilities

code-validator-api is an open source library of source code for vocabulary validator APIs and services from the Office of the National Coordinator for Health IT. A code-validator-api vulnerability exists in versions prior to 1.0.30. An attacker exploited this vulnerability to cause xml external...

World Wide Web Consortium Unicorn Cross-Site Scripting Vulnerability

Unicorn is a World Wide Web Consortium open source validator . It helps people improve the quality of web pages by performing various checks. A cross-site scripting vulnerability exists in World Wide Web Consortium Unicorn, which stems from incorrect manipulation of the parameter message resultin...

PT-2022-9029 · Openmrs · Openmrs Appointment Scheduling Module

Name of the Vulnerable Software and Affected Versions: OpenMRS Appointment Scheduling Module versions up to 1.12.x Description: A problematic issue has been found, affecting the validateFieldName function of the AppointmentTypeValidator.java file. This leads to cross-site scripting and can be...

config-validator:fuzz_config_validator: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5886065380818944 Project: config-validator Fuzzing Engine: libFuzzer Fuzz Target: fuzzconfigvalidator Job Type: libfuzzerasanconfig-validator Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10c000003ba0 Crash State: pthreadcreate...