MAL-2022-6367 Malicious code in suspicious-react-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b72ddb83c9fbe20fe07636b0a5aedb1c5f788d74050f6027f090bce10b2ab48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5990 Malicious code in search-gov-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 451bca5bdb635f0f47d70d754081dd0ca0a128b60a2c3fb3821b252695738d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-988 Malicious code in analytics.usa.gov (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1a33363f19a2f8802327fdc87bafbb52ff7966afefd35a4a378d19651da0132 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7132 Malicious code in whatsapp-landing-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6dfeb2e9b7018dd0e4d3c0b412ca067d8db34afd80fe1974702b9c96969b842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2708 Malicious code in emagister-front (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f45d02445fbb7d3928e6a78f28b26d574105567be258409430fce52c558c0b20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2454 Malicious code in dev_pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2240093f90fd446422c55a2c116ef46e4024c40c568e7e69f13d8e24b58e1c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5039 Malicious code in oidc-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8dde1cae8b7c8806aa936f115d9ec3d0c62fd345d050570a41951b35605b342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6632 Malicious code in training-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44bbe764b3b73581dba9c264aa6db75d4b286daae4495b94f91722aaf4167fd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-507 Malicious code in @platform-apps/portal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298a777eb32bdc94846d8bde55c3c1f303ee090b28c5dc2a5a17dce9bbeab9b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2623 Malicious code in dw-header-footer-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece43619e69dba03ea7cc723377c5703397137721c477107801e86416e5886dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-27580

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges ...

CVE-2022-27580

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges ...

Deserialization of untrusted data

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges ...

CVE-2022-34642

The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect mask which can cause a Denial of Service DoS...

CVE-2022-34642

The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect mask which can cause a Denial of Service DoS...

CVE-2022-28683

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28672

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

riscv-isa-sim 安全漏洞

riscv-isa-sim is a RISC-V ISA simulator. A security vulnerability exists in riscv-isa-sim, which stems from the mcontrol.action component containing an error mask that could lead to a denial of service DoS...

CVE-2022-1933

The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting...

CVE-2022-1672

The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks...