CVE-2022-45389

A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to an attacker-specified repository...

PT-2022-28162

Name of the Vulnerable Software and Affected Versions Enonic XP versions less than 7.7.4 Description The issue is a session fixation problem that allows a remote and unauthenticated attacker to use prior sessions due to the lack of invalidating session attributes. This affects all id-providers...

msportal.pl Cross Site Scripting vulnerability OBB-2976377

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-4213 Malicious code in koh-tvjs-xp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b70763732994fd837caedcb51cb5d87656aad840a15292ac359751046201aa2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in koh-tvjs-xp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b70763732994fd837caedcb51cb5d87656aad840a15292ac359751046201aa2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Bad rhythm: Janet Jackson song resonates poorly with some old hard drives

Janet Jacksons Rhythm Nation music video would have caused quite the commotion back in the old Windows XP days. If youre still running a certain model of an OEM hard drive from the Windows XP days, you may still be liable to experience the same thing today. However, said commotion was not solely...

Siemens SCALANCE

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2022-4147 · Siemens · Scalance W-700 +9

Name of the Vulnerable Software and Affected Versions: SCALANCE M-800 / S615 versions prior to V2.3.1 SCALANCE SC-600 family versions prior to V2.3.1 SCALANCE W-1700 IEEE 802.11ac family versions prior to V2.3.1 SCALANCE W-700 IEEE 802.11ax family versions prior to V2.3.1 SCALANCE W-700 IEEE...

GSD-2022-1004054 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by...

GSD-2022-1003874 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 b...

GSD-2022-1003549 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 b...

GSD-2022-1003300 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by...

GSD-2022-1003000 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by...

PT-2022-31563

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.1 through v5.15.45 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet bee...

PT-2022-31812

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

PT-2022-32137

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

PT-2022-31997

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

PT-2022-31263

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

PT-2022-32244

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue concerns the irqchip/armada-370-xp and is related to not handling Performance Counter Overflow on certain chip models. The actual impact and attack plausibility have not yet been...

Malicious Package

Overview xp-ui is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was install...