MAL-2022-1198 Malicious code in aws-instance-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5892ee8a63b04ab411e3502b2e75dff16debff01b4903c74798ec7f6fa11303b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-perspective (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75ea46917a73a9d1a8b12320912bea4deb98b13b0cdd6cb1822f6b9d6455a4c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1202 Malicious code in aws-simple-cicd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a27cc2b92403fa555f199694756a21013cafbd1bed8513bca1d856ecfa3fc286 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1199 Malicious code in aws-iot-greengrass-accelerators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d12fb992832ab6f19a89aff974cd7a31a75944f387d6c3ca8c8d26e1507f2bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-greengrass-provisioner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 496decc383bda63b7c118bc82ff28dcb006789eaec77d1226416debec9a9dc20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1200 Malicious code in aws-ms-deploy-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe7c48a4ab3024ab51cf5a3b5bccdd0daa9bd6b87983ef3dd8137c3f697a0993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1197 Malicious code in aws-greengrass-provisioner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 496decc383bda63b7c118bc82ff28dcb006789eaec77d1226416debec9a9dc20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6322 Malicious code in strapi-provider-upload-aws-s3-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1d24b53a4fdd8c047f1239905fddd51ae8f1cb40bc6e5de7f014a3c4d9595aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-749 Malicious code in @xvideos/aws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25da6fe619fd48c8ada52eae4f93092e0b83b86bd9ef37fe9a0fcb45b51e5d14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-33915

Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or...

CVE-2022-33915

Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or...

Race condition

Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or...

LambdaGuard - AWS Serverless Security

AWS Lambda is an event-driven, serverless computing platform provided by Amazon Web Services. It is a computing service that runs code in response to events and automatically manages the computing resources required by that code. LambdaGuard is an AWS Lambda auditing tool designed to create asset...

CVE-2022-33915

Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or...

CVE-2022-33915

CVE-2022-33915 describes a race-condition in the Amazon AWS log4j-cve-2021-44228-hotpatch package (pre-1.3.5). The hotpatch iterates running Java processes and loads a patch with the same permissions, which can be exploited by a local user to cause a privileged execution when a custom Java proces...

USN-5485-1: Linux kernel vulnerabilities

It was discovered that some Intel processors did not completely perform cleanup actions on multi-core shared buffers. A local attacker could possibly use this to expose sensitive information. CVE-2022-21123 It was discovered that some Intel processors did not completely perform cleanup actions on...

GHSA-5Q86-62XR-3R57 Uses of deprecated API can be used to cause DoS in user-facing endpoints

Impact Several HandleRoute endpoints make use of the deprecated ioutil.ReadAll. ioutil.ReadAll reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server will be able to crash it and cause denial of service. Eventsources susceptible to an out-of-memor...

Uses of deprecated API can be used to cause DoS in user-facing endpoints

Impact Several HandleRoute endpoints make use of the deprecated ioutil.ReadAll. ioutil.ReadAll reads all the data into memory. As such, an attacker who sends a large request to the Argo Events server will be able to crash it and cause denial of service. Eventsources susceptible to an out-of-memor...

TIBCO Security Advisory: July 19, 2022 - TIBCO Data Virtualization -CVE-2022-30570

TIBCO Data Virtualization Access Control Vulnerability Original release date: July 19, 2022 Lastrevised: --- CVE-2022-30570 Source: TIBCOSoftware Inc. Products Affected TIBCO Data Virtualization versions 8.5.2 and below TIBCO Data Virtualization for AWS Marketplace versions 8.5.2 and below The...

aws-marketing.de Cross Site Scripting vulnerability OBB-2652069

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...