Malicious code in azure-video-analyzer-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0127d81ea77498d7cf290baf7482fe497d0e7159bcb6b3eda4229b01510592b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1390 Malicious code in azure-video-analyzer-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0127d81ea77498d7cf290baf7482fe497d0e7159bcb6b3eda4229b01510592b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in move-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f495b9ee22af734969a0331f448e1c1eca756f7f7bb79cdabbcea1aac84e6b0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4701 Malicious code in move-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f495b9ee22af734969a0331f448e1c1eca756f7f7bb79cdabbcea1aac84e6b0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arm-videoanalyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f39dca054bbd4f9bec0819add6b85d88265fcd32be99943ff9f4635301d23673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in video-analyzer-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac613c03bdd68c13b5218b3bb429896bae83aa05e52d2f7cc78e2925f26c536e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6914 Malicious code in video-analyzer-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac613c03bdd68c13b5218b3bb429896bae83aa05e52d2f7cc78e2925f26c536e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-video-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d19222ce6e1dd7c45c8710269aa3c0c829228176538a588520edeaf0480d5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1389 Malicious code in azure-video-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d19222ce6e1dd7c45c8710269aa3c0c829228176538a588520edeaf0480d5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FreeBSD : zeek -- potential DoS vulnerabilty (204f1a7a-43df-412f-ad25-7dbe88f54fa4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 204f1a7a-43df-412f-ad25-7dbe88f54fa4 advisory. - Tim Wojtulewicz of Corelight reports: Fix potential hang in the DNS analyzer when receiving a...

zeek -- potential DoS vulnerabilty

Tim Wojtulewicz of Corelight reports: Fix potential hang in the DNS analyzer when receiving a specially-crafted packet. Due to the possibility of this happening with packets received from the network, this is a potential DoS vulnerability...

BinAbsInspector - Vulnerability Scanner For Binaries

BinAbsInspector Binary Abstract Inspector is a static analyzer for automated reverse engineering and scanning vulnerabilities in binaries, which is a long-term research project incubated at Keenlab. It is based on abstract interpretation with the support from Ghidra. It works on Ghidra's Pcode...

acuity (=6.18.0), acuitypro (=6.18.0) +60 more potentially affected by CVE-2022-29211 via tensorflow (>=2.8.0 <=2.8.0rc1)

tensorflow PYPI version =2.8.0, =1.2.8, =1.0.43, =0.2.2, =0.0.1, =0.0.2, =0.2.8, =0.14.0, =0.1.3, =0.0.9, =0.2.27, =0.2.41 - complaintclassify =0.0.5 - conversational-sentence-encoder =0.0.6 and more Source cves: CVE-2022-29211 Source advisory: OSV:GHSA-XRP2-FHQ4-4Q3W...

XSS vulnerability in Jenkins Build Failure Analyzer Plugin

Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to provide console output for builds used to test build log indications. Build Failure Analyzer...

GHSA-P5JH-8RXP-WQJJ XSS vulnerability in Jenkins Build Failure Analyzer Plugin

Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to provide console output for builds used to test build log indications. Build Failure Analyzer...

Missing permission check in Jenkins Build Failure Analyzer Plugin

A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression...

Inefficient Regular Expression Complexity in Jenkins Build Failure Analyzer Plugin

A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process...

GHSA-2HHC-F86X-X74F Inefficient Regular Expression Complexity in Jenkins Build Failure Analyzer Plugin

A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process...

GHSA-X9GC-P2QP-4P7V Missing permission check in Jenkins Build Failure Analyzer Plugin

A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression...

Cross-Site Request Forgery in Jenkins Build Failure Analyzer Plugin

A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers to have Jenkins evaluate a computationally expensive regular expression...