KNX Connection Authorization 安全漏洞

KNX Connection Authorization is a network security product from KNX Open Source. KNX Connection Authorization suffers from a security vulnerability that stems from the fact that it is easy to be locked out and that users cannot reset them to gain access to the device...

Default credentials

The Akuvox E11 secure shell SSH server is enabled by default and can be accessed by the root user. This password cannot be changed by the user...

SUSE CVE-2017-9183

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:309:7...

CVE-2022-46234

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-47209

A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is “support” and cannot be changed by a user via any normally accessible means...

CLSA-2022-1668120434 perl: Fix of CVE-2020-16156

CVE-2020-16156: recognize CANNOTVERIFY signature verification type...

CLSA-2022-1668118081 Fix CVE(s): CVE-2020-16156

SECURITY UPDATE: Signature verification bypass - debian/patches/fixes/CVE-2020-16156.patch: recognize CANNOTVERIFY signature verification type, add two new failure modes based on 'cpanpath' and improve interaction with external 'gpg' executable. - CVE-2020-16156...

CLSA-2022-1668032518 perl: Fix of CVE-2020-16156

CVE-2020-16156: recognize CANNOTVERIFY signature verification type...

Malicious code in bipiy74902-wx1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a8950277704e7285a7354800901af2f4221755dedd2f08be864709cf70e28c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

Malicious code in mynewpkgtest6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a75f257f8daa7f8906075a04b194cb1134603a893ca4016605830d1435776bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in es-sink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e906ae6ca5366dd26487075c03bc7392f9c04497097db62d334da8b27e75a4ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cornershop/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e71a073c01460f82f4f890082f101da6beda925c7cc76c7e43484545004278c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cisco-bem-network-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36d6613f246fd08612e8b2fd3292d25600598f0b2ad7748c88b8014e41e632c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in okapi-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3ac68a0bfba7015d9f4f6ca2a652db395585cce1f08d9815150b9728a02dc06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hub-rss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e2c3f2d68e315b2b7c48efbdcacbf670e5763f027831953c2d37200b8f2d9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in electron-secure-defaults (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53019875613fda42ff05ef2cbbd5556997c7b2dde7c3a61ea752dfc7cc0719ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lolo0099 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 823a410d43a729322bb87f5fd5dbfcd45f0775236d4a83c09b25411e16fc388e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-7592-93RM-6GPX Injection in Jenkins

A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names containing control characters that can then appear to have the same name as other users, and canno...

Mozilla: Browser window spoof using fullscreen mode

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When navigating from inside an iframe while requesting full screen access, an attacker-controlled tab could have made the browser unable to leave full screen mode...