10295 matches found
Malicious code in wf_scheduler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b27d80eeb4ae39c661ea3e04c2de89d70136bcf876cac906eaf89c48f2d621c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in espn-critical (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c474e2370da6b06c90e151e8bde6e4b3e0f0e06d75f6b0f0bd2919f0b9aaf675 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @huji/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ac49504cf847090e77175a7cb05a0c654368325396488ae6733f2e589bf8edd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @dropbox/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b81c53309606cb531509675ff55dd3d9c2b9cd5518165c5de27bd89989205c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cito-social (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e35d16a546269a8f49c46fe344c1984d18fdf4a9ea1a90721b49fd75b6404c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in npm-mega (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dead1dc1c8e5a25de0e67faeb00105cc8e8a648f491008e865f9e0407e2fd373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in action-create-release-pr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1f9c096fa3bf9d38477488398a8d49d517f96c85896b4312ef8e8771336c43a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in blockchain-classic-wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c000c341f611720d733afdd0b5e7047b7d04edbe07d873702ca63594a9d60b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in blockchain-wallet-ios (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115182d6218da72cd6f3f3460eadba87a00de07f6df9bca534a220605fd26c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in epam-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fde824f3d16819175b7781da6c196f7ad067667235e2c8663a656a8debecb58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in datadog-agent-github-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9002ec7ae8e71f521014b440d4e81aea944c0c36aca8f9cd4c01bd5e609626cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Joplin Cross-Site Scripting Vulnerability (CNVD-2022-66492)
Joplin is an open source notes and to-do list application. versions prior to Joplin Desktop App 1.8.5 are vulnerable to a cross-site scripting vulnerability, which stems from improper html cleanup and can be exploited to execute arbitrary code...
USN-5485-1 linux, linux-aws, linux-aws-hwe, linux-aws-5.13, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.13, linux-azure-5.4, linux-azure-fde, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-gcp-5.13, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe, linux-hwe-5.13, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-intel-5.13, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oracle, linux-oracle-5.13, linux-oracle-5.4 vulnerabilities
It was discovered that some Intel processors did not completely perform cleanup actions on multi-core shared buffers. A local attacker could possibly use this to expose sensitive information. CVE-2022-21123 It was discovered that some Intel processors did not completely perform cleanup actions on...
USN-5484-1 linux vulnerabilities
It was discovered that the Linux kernel did not properly restrict access to the kernel debugger when booted in secure boot environments. A privileged attacker could use this to bypass UEFI Secure Boot restrictions. CVE-2022-21499 It was discovered that a race condition existed in the network...
Joplin 跨站脚本漏洞
Joplin is an open source notes and to-do list application. versions prior to Joplin Desktop App 1.8.5 are vulnerable to a cross-site scripting vulnerability, which stems from improper html cleanup and can be exploited to execute arbitrary code...
ALPINE-CVE-2022-21166
Incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
ALPINE-CVE-2022-21127
Incomplete cleanup in specific special register read operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
DEBIAN-CVE-2022-21127
Incomplete cleanup in specific special register read operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...