TIBCO Security Advisory: February 22, 2023 - TIBCO EBX -CVE-2022-41565

TIBCO EBX Cross Site Scripting XSS Vulnerability Original release date: February 22, 2023 Last revised: --- CVE-2022-41565 Source: TIBCO Software Inc. Products Affected TIBCO EBX versions 5.9.21 and below TIBCO EBX versions 6.0.11 and below TIBCO Product and Service Catalog powered by TIBCO EBX...

SUSE CVE-2009-0153

International Components for Unicode ICU 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences...

AlmaLinux 8 : thunderbird (ALSA-2022:8547)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:8547 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with...

CVE-2022-31199

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and...

Malicious code in aries-askar-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec7e85602fc5ad6913bd9bd909f95910a70ba3e3334f0b5f07195924ba097479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Windows DPAPI 安全漏洞

Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows DPAPI Data Protection Application Programming Interface. The following products and versions are affected: Windows 11 for x64-base...

Malicious code in cabelcli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 382a921684a0a041807859f787c6f94bdb42702e85cdbb673a398765e5928122 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in roar-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f5b98dd22cce3d441cede4ea090e2c4c58e9b03c201ea89d465980530a5561 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toolbox-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80bd5635a411f906576afb9ea138bba8e2255f7b8b726a44f8ce36c026532850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in publicrepoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b8d65b9b7d2d1cdad3ab035dea888ade65d97dd0b7a320dc33665ca161c3093 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testnpmad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 991beb453c8df40ae6a2fe87f3b9c62481a14b97b6993ef9d43712b148a99ace Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trello-canonical-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8765aa5264cee13f61e9d087231cfe8f9b35a95dde3d2513ea22bbe8038d39f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @maalik/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c90984124534f66b230ac2eb92a0364a88b33f5c02db2cba4e3a47086f9f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in traditional-infrastructure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc15ec1e57cd2054d0571b163cd904eef13c3f7132a27202419a7c75c067d63a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arm-subscriptions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18dcd025e0eea1487c9eb5fb888369668f5a69a986a8554f2ebc33b4b78e67b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @logistics-frontend/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2c617a6d61a62b6cadd5b810e4ef2ff8ab74e499dfe400bd5294f7b88e2a09c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wakakaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b86f93aaec516467ba32dfce0e7cc85813d6110f56928daac193d8123758895b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-21971 Windows Runtime Remote Code Execution Vulnerability

...

Microsoft Windows NTFS 权限许可和访问控制问题漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error alerts, disk self-healing, and logging capabilities. Microsoft Windows NTFS is vulnerable to privilege permission and access control issues. The following products and editions are...

Microsoft Windows MSHTML Platform 代码注入漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected: Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit...