MAL-2022-4039 Malicious code in jmesacrxunzwbyhl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44252d3140f147df26c544afc0eafff3c2ba163c2493d67da87a7db26d46cabd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5947 Malicious code in sbtydhovriufmpqx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c13342eb62df8f8fbcd1a66c24835adf16ceeb8a5fe22077aa61f1904e44212 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3121 Malicious code in fqapvwmguoyiktxd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a48bb9013f560ce48c5d1cfa69ab36fc4df036758b6ca7952888ec102824a9f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34743

The CVE-2022-34743 entry describes an out-of-bounds read in the USB port AT commands, impacting Huawei/HarmonyOS devices (notably HarmonyOS 2.0). Existence of the vulnerability is documented in multiple sources (NVD, Red Hat, CNVD, CVE List). The effect is potential loss of device availability. T...

CVE-2022-34743

The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability...

MAL-2022-1884 Malicious code in chart.js-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ddb1847faf5a848d1147a781b71524dc369a6c7ab7485df61781934e8cc0e64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

fptaximadrid.es Cross Site Scripting vulnerability OBB-2722961

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

HUAWEI HarmonyOS 缓冲区错误漏洞

HUAWEI HarmonyOS is an operating system from China's Huawei HUAWEI. It provides a microkernel-based distributed operating system. A security vulnerability exists in HUAWEI HarmonyOS 2.0, which stems from an out-of-bounds read vulnerability in the USB port AT command, which could be exploited by a...

UBUNTU-CVE-2022-34481

In the nsTArrayImpl::ReplaceElementsAt function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

The vulnerability of the `nsTArray_Impl::ReplaceElementsAt()` function in Thunderbird email clients, Firefox browsers, and Firefox ESR allows a malicious actor to execute arbitrary code.

The vulnerability of the nsTArrayImpl::ReplaceElementsAt function in Thunderbird email clients, Firefox browsers, and Firefox ESR browsers is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

at-schweisstechnik.de Cross Site Scripting vulnerability OBB-2704005

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

Denial Of Service (DoS)

lettersanitizer is vulnerable to denial of service. The vulnerability exists in the sanitizeHtml function in index.js as it does not properly handle css at-rules, allowing an attacker to crash the system via a malicious request...

CVE-2022-31103 Improper handling of CSS at-rules in lettersanitizer

lettersanitizer is a DOM-based HTML email sanitizer for in-browser email rendering. All versions of lettersanitizer below 1.0.2 are affected by a denial of service issue when processing a CSS at-rule @keyframes. This package is depended on by react-letter, therefore everyone using react-letter is...

agnes-at-work.de Cross Site Scripting vulnerability OBB-2687972

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Improper handling of CSS at-rules in lettersanitizer

Impact All versions of lettersanitizer below 1.0.2 are affected by a denial of service issue when processing a CSS at-rule @keyframes. This package is depended on by react-letter, therefore everyone using react-letter is also at risk. Patches The problem has been patched in version 1.0.2...

GHSA-7R3R-GQ8P-V9JJ Improper handling of CSS at-rules in lettersanitizer

Impact All versions of lettersanitizer below 1.0.2 are affected by a denial of service issue when processing a CSS at-rule @keyframes. This package is depended on by react-letter, therefore everyone using react-letter is also at risk. Patches The problem has been patched in version 1.0.2...

MAL-2022-1454 Malicious code in bakabaka0010 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58cb4df396fbd6382b1e2cee32dfeb55c170a19a85629b60f9099cdd20507a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...