Malicious code in uber-rv-web-common-virtual-8d2dce4f55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbae8809f558786b2938d097fa3abc6d250af302ff70e680c5cbf865b32b6d75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1017 Malicious code in uber-rv-web-common-virtual-8d2dce4f55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbae8809f558786b2938d097fa3abc6d250af302ff70e680c5cbf865b32b6d75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @serenity-web/common-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca192112e75d572b4acfa46a40cbca00653059b1452b396d996396c27648ced Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-13 Malicious code in @serenity-web/common-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca192112e75d572b4acfa46a40cbca00653059b1452b396d996396c27648ced Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bmt-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35077ef12023da408992cf0c35a5177c73041bdba780bceb1f4fb2d5a76ed3b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1632 Malicious code in bmt-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35077ef12023da408992cf0c35a5177c73041bdba780bceb1f4fb2d5a76ed3b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-733 Malicious code in @worki/lib-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17e4ceaa655b87bc15586889eff02972c889fb9215a6366492bb9b2adf20e51d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4 <=0.5), ch.ralscha:extdirectspring (=1.4.0) +75 more potentially affected by CVE-2014-0054 via org.springframework:spring-webmvc (>=4.0.0.RELEASE <=4.0.1.RELEASE)

org.springframework:spring-webmvc MAVEN version =4.0.0.RELEASE, =0.4, =0.1.1-alpha, =0.2-alpha, =1.0.0, =2.0.3.2.1, =2.1.3.10.1, =2.0.3.6, =2.0.3.6, =2.1.2.7.1, =2.0.3.1, =2.1.4.19 and more Source cves: CVE-2014-0054 Source advisory: OSV:GHSA-8CMM-QJ8G-FCP6...

Arbitrary File Overwrite

archiva-web-common is vulnerable to arbitrary file write and delete. The vulnerability exists as it was possible to provide a malicious file path via the file name, causing the file write and delete operations to be executed on files that exists out of the temporary folders...