298 matches found
CVE-2022-2469
GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...
Out-of-bounds
GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...
CVE-2022-2469
GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...
Fedora: Security Advisory for golang-github-vultr-govultr-2 (FEDORA-2022-e674d52438)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious Package
Overview @kraken-frontend/kraken-api-client is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerabl...
MAL-2022-6572 Malicious code in tilled-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d123fddcb18367f3ca5df73ee43dfd1f0fff9b5755b07ed392f9f70e7f9797f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tilled-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d123fddcb18367f3ca5df73ee43dfd1f0fff9b5755b07ed392f9f70e7f9797f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in frn-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6510b676b0a865d924429b9b3a41ad4365e754db47f2fa6b34f9305237b7aea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3213 Malicious code in frn-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6510b676b0a865d924429b9b3a41ad4365e754db47f2fa6b34f9305237b7aea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1831 Malicious code in carpenter-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b80c64be64124594a8fbe7518c6cdc1a3d6b7708e35da5e78de3a95b896168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in carpenter-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b80c64be64124594a8fbe7518c6cdc1a3d6b7708e35da5e78de3a95b896168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1874 Malicious code in chainlink-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f7c227698d07bc8f6d7cc5c45565f8971534e634ac4ee67bbdbe7275264ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in chainlink-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f7c227698d07bc8f6d7cc5c45565f8971534e634ac4ee67bbdbe7275264ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5101 Malicious code in openstack-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31090ff688f4cfd0017eacf09e0f12f4f4e674cce06594cddfb2c91ffd21272d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in openstack-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31090ff688f4cfd0017eacf09e0f12f4f4e674cce06594cddfb2c91ffd21272d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pod-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e090d39edd41df4974cec8d792fc8b2d94bc0b6e25d65438ca010ce8f4694d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5390 Malicious code in pod-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e090d39edd41df4974cec8d792fc8b2d94bc0b6e25d65438ca010ce8f4694d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Kubeclient Config Man-in-the-Middle
The vulnerability of the Kubeclient::Config implementation for the REST API client of Kubernetes allows for certificate validation process errors. Exploiting this vulnerability could enable a malicious actor to carry out a “man-in-the-middle” attack...
be.rufer.swisscom.sms:api-client (1.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (0.9) +233 more potentially affected by CVE-2022-22950 via org.springframework:spring-expression (4.1.3.release)
org.springframework:spring-expression MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - be.rufer.swisscom.sms:api-client 1.0 -...
PT-2022-2058
Name of the Vulnerable Software and Affected Versions kubeclient versions prior to 4.9.3 Description The issue is related to errors in the certificate authentication procedure of the Kubeclient::Config class in the Kubernetes REST API client. This can allow a remote attacker to perform a...