10302 matches found
Malicious code in axgponrjtfdlkwbz (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc8bd093d4628ef7b408bc6bc175710596e1c5d5fc489fc5701cfa8f79d1bc5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in euvpiokkxdhmzwaq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49df66418c850683b95610386943a2bfa894fdc827643f67309e747285ac0183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hpkeaxgjnldbuism (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b2cd39d60edd66a0f3054a182462e76a502c255ec5b5e5ee123c581b73a4fe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in lmpcrfdnkyzehtja (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767807fced35833959fb61fef9ce2fa85b57982c0c0340af8029f9068cd41b76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PYSEC-2022-223
mat2 aka metadata anonymisation toolkit before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive...
mat2 路径遍历漏洞
mat2 is a metadata removal tool by the individual developer of jvoisin. A path traversal vulnerability exists in versions of mat2 prior to 0.13.0, which stems from a vulnerability that allows traversal during ZIP archive cleanup of the ... / directory during ZIP archive cleanup. An attacker could...
Amazon Linux AMI : microcode_ctl (ALAS-2022-1606)
The version of microcodectl installed on the remote host is prior to 2.1-47.40. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1606 advisory. 2024-05-09: CVE-2021-33117 was added to this advisory. Improper access control for some 3rd Generation IntelR XeonR...
CVE-2022-2048
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...
DEBIAN-CVE-2022-2048
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...
UBUNTU-CVE-2022-2048
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...
BookWyrm 跨站脚本漏洞
BookWyrm is a social reading platform. A cross-site scripting vulnerability exists in BookWyrm versions prior to 0.4.1, which stems from not properly cleaning up the html presented to the user, and is exploited by an attacker to perform cross-site scripting attacks...
IBM Security Verify Access 跨站脚本漏洞
IBM Security Verify Access ISAM is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls,...
Malicious code in ajax-libs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a42a0d791115ba30e5e048f5af09cdaff93938a6ca4a25d5af7ae617df66b47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE-SU-2022:2276-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197102 fixes one issue. The following security issue was fixed: - CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. bnc1199605...
The vulnerability of the Item_func_in::cleanup/Item::cleanup_processor function in the MariaDB database management system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Itemfuncin::cleanup/Item::cleanupprocessor function in the MariaDB database management system is related to the execution of operations outside of memory buffers. Exploitation of this vulnerability could allow a malicious actor to compromise the confidentiality, integrity...
Debian DLA-3065-1 : linux - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3065 advisory. Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. This update is...
CVE-2022-32085
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor...
DEBIAN-CVE-2022-32085
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor...
