MAL-2023-8206 Malicious code in @zettle-bo/receipts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f074405b00ebdd38c3d826a75574548f1f1b7c544506344f2fa7ecd28a210885 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8200 Malicious code in @zettle-bo/invoices (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396cb6377e3adb994eacdae5dfc8df633bb4e320f9bff443b955c8d0e1bed43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8192 Malicious code in @zettle-bo/bootstrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 348b20a3785062502338cff3dc24b6f6ed6d517924be7055ceb59e444232a7cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8209 Malicious code in @zettle-bo/settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fba492d667a05fc7319b7f2a8b78d3c30055af809eb17047766ddd8e1b747898 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutex

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free on amdgpubolist mutex If amdgpucsvmhandling returns r != 0, then it will unlock the bolistmutex inside the function amdgpucsvmhandling and again on amdgpucsparserfini. This problem results in the...

Spoofing

PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 contain a patch for this issue. There are ...

GSD-2022-1007138 drm/virtio: Check whether transferred 2D BO is shmem

drm/virtio: Check whether transferred 2D BO is shmem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1006902 drm/virtio: Check whether transferred 2D BO is shmem

drm/virtio: Check whether transferred 2D BO is shmem This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35283 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A potential memory leak issue was identified in the nouveau bo alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35491 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A potential memory leak was identified in the nouveau bo alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

UVI-2021-1001626 drm/nouveau: avoid a use-after-free when BO init fails

drm/nouveau: avoid a use-after-free when BO init fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.73 by commit...

UVI-2021-1001576 drm/amdgpu: fix gart.bo pin_count leak

drm/amdgpu: fix gart.bo pincount leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.154 by commit 83d857d6b0967b6709cd38750c3ce2ed8ced1a9...

truck1.bo Cross Site Scripting vulnerability OBB-2128430

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Jinan Bo Lin Network Technology Co., Ltd. website building system ne*** page SQL injection vulnerability

Jinan Bo Lin Network Technology Co., Ltd. is a provide Jinan website construction, Jinan website production, Jinan web design, Jinan website design, Jinan website optimization, website maintenance, website revision, domain name space, 400 phone, store marketing and other Internet business Jinan...

Jinan Bo Lin Network Technology Co., Ltd. website building system ab*** page SQL injection vulnerability

Jinan Bo Lin Network Technology Co., Ltd. is a provide Jinan website construction, Jinan website production, Jinan web design, Jinan website design, Jinan website optimization, website maintenance, website revision, domain name space, 400 phone, store marketing and other Internet business Jinan...

SQL Injection Vulnerability in Bo Yun CD-ROM System of Hangzhou Maida Electronics Co.

Hangzhou Maida Electronics Co., Ltd. provides professional library systems, including search, storage, access and other functions, customers involved in the domestic major universities and provincial and municipal libraries. A SQL injection vulnerability exists in Bo Yun CD-ROM system of Hangzhou...

SQL Injection Vulnerability in Bo***.cl***.php File in Dream CMS Backend

Dream CMS lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design model. A SQL injection vulnerability exists in the Bo.cl.php file in the background of Dream CMS. Attackers can use the vulnerability to obtain database sensitive information...

radiolider97.bo Cross Site Scripting vulnerability OBB-1346545

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-6288

The CVE-2020-6288 issue affects SAP Business Objects BI Platform (Web Intelligence HTML interface): an attacker with edit-doc rights can upload any file (including scripts) due to insufficient file-format validation, enabling unrestricted upload of dangerous file types and allowing modification o...

@csltech/strong-nginx-controller (>=1.0.2 <=1.0.3), @csltech/strong-pm (>=7.0.0 <=7.0.2) +56 more potentially affected by CVE-2016-1000226 via swagger-ui (>=2.0.17 <=2.1.8-M1)

swagger-ui NPM version =2.0.17, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =2.8.29, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.1.9 and more Source cves: CVE-2016-1000226 Source advisory: OSV:GHSA-7F59-X49P-V8MQ...