3908 matches found
Malicious code in alphavantage-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a52cf3eeac571578098a28579582b63109d138c2459095052076787de9db956 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-947 Malicious code in alphachain-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ce8ea7b7f8ae4e859804add4dc811e00cdf84a6b70123d0415ce67ce2ef7493 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-844 Malicious code in ada-balance-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6727c4df16febb1399cae1caa5604a2441a91be359ed453d105095de36d6bb03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-948 Malicious code in alphavantage-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a52cf3eeac571578098a28579582b63109d138c2459095052076787de9db956 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in accuweather-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd2d43078275d0d6cca7d9291adde69d021f469bddf2c8970db4f1d7d24ca96a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in xbto-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 770fd82916af600433e97fa8d4e2a161b28dabd08484723434b21e45c6543c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in 1forge-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60733beacf4869567448dac63a54e5025293ca83f41cfdbfca52bb9f6071c1a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7264 Malicious code in xbto-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 770fd82916af600433e97fa8d4e2a161b28dabd08484723434b21e45c6543c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-20 Malicious code in 1forge-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60733beacf4869567448dac63a54e5025293ca83f41cfdbfca52bb9f6071c1a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-823 Malicious code in accuweather-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd2d43078275d0d6cca7d9291adde69d021f469bddf2c8970db4f1d7d24ca96a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in npm-maven-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d0b627fb66c58a57cb2b61506f3422f154134c762e0bba3946787e888e1636 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4936 Malicious code in npm-maven-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d0b627fb66c58a57cb2b61506f3422f154134c762e0bba3946787e888e1636 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Authentication Bypass
parse-server is vulnerable to authentication bypass. The vulnerability exists because the certificate in auth adapter is not properly validated. An attacker is able to bypass authentication checks by making a fake certificate accessible via certain Apple domains and providing the URL to that...
CVE-2022-20133
In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
PT-2022-14372 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to a missing permission check in the setDiscoverableTimeout function of AdapterService.java. This could lead to a bypass of user interaction, resulting in local...
SIEMENS Teamcenter Hardcoded Default Credentials Vulnerability
Teamcenter software is a modern, adaptable product lifecycle management PLM system that connects people and processes across functional silos through digital threads to enable innovation.SIEMENS Teamcenter is vulnerable to a hard-coded default credential vulnerability that originates in the Java ...
@nexus-switchboard/nexus-conn-jira (>=0.1.0 <=0.2.2), @nexus-switchboard/nexus-mod-service (>=0.4.1 <=0.6.3) +1 more potentially affected by CVE-2021-26073 via atlassian-connect-express (>=3.5.2 <=4.4.1)
atlassian-connect-express NPM version =3.5.2, =0.1.0, =0.4.1, =0.0.1, =2.0.5 Source cves: CVE-2021-26073 Source advisory: OSV:GHSA-4V96-M8XV-X83V...
at.porscheinformatik.zanata:common (>=4.7.0 <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0 <=4.7.8) +516 more potentially affected by CVE-2020-1695 via org.jboss.resteasy:resteasy-client (>=3.0.0.Final <=3.11.5.Final)
org.jboss.resteasy:resteasy-client MAVEN version =3.0.0.Final, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.0.0.Final, =1.0.3.Final and more Source cves: CVE-2020-1695 Source advisory: OSV:GHSA-63CQ-PPQ8-CW6G...
CVE-2022-1679
A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system...
CVE-2022-1679
A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system...