Malicious code in amount-normalizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d09735973491e8bc50b7327031ed78e899206756947f1e87796071689767917d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @igraal/web-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b528b8b8df766627a5ea305e8e4a7cad961d3e3c5e367b6c4c6510e37238f6d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SAP Business One 代码问题漏洞

SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. A denial-of-service vulnerability exists in SAP Business One version 10.0, which stems from improper input clean...

svelte 跨站脚本漏洞

svelte is a new way to build web applications open-sourced by Svelte. A security vulnerability exists in svelte versions prior to 3.49.0, which stems from improper input cleanup in the toString function...

PT-2022-3741 · Microsoft · Windows Security Account Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Security Account Manager SAM affected versions not specified Description: The issue is related to the incorrect cleanup or release of resources in the Windows Security Account Manager SAM. It allows an attacker to cause a denial of...

Malicious code in odgikqtuwcmvhpzn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 849e604c2ca9c89c0da2b89856fd4d8a4bc562b85dd2f5ad90b37c46e5aaadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epszkyqktamihwbr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0db54ef5424a49a8959731c78f67b21979e23a77059014b733d5312aad4af2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nkurkbscyphxzawt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e6aad02899969c630362e29e920f12a3de7165ce71c6fb5998d1b87db26234e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apzyjlbqwvkehmgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7449a0bc2ebf1412b37f3064f2e0d503722ffe0ffe5c96d09ff8013780ced3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axgponrjtfdlkwbz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc8bd093d4628ef7b408bc6bc175710596e1c5d5fc489fc5701cfa8f79d1bc5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in euvpiokkxdhmzwaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49df66418c850683b95610386943a2bfa894fdc827643f67309e747285ac0183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hpkeaxgjnldbuism (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b2cd39d60edd66a0f3054a182462e76a502c255ec5b5e5ee123c581b73a4fe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lmpcrfdnkyzehtja (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767807fced35833959fb61fef9ce2fa85b57982c0c0340af8029f9068cd41b76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2022-223

mat2 aka metadata anonymisation toolkit before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive...

mat2 路径遍历漏洞

mat2 is a metadata removal tool by the individual developer of jvoisin. A path traversal vulnerability exists in versions of mat2 prior to 0.13.0, which stems from a vulnerability that allows traversal during ZIP archive cleanup of the ... / directory during ZIP archive cleanup. An attacker could...

Amazon Linux AMI : microcode_ctl (ALAS-2022-1606)

The version of microcodectl installed on the remote host is prior to 2.1-47.40. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1606 advisory. 2024-05-09: CVE-2021-33117 was added to this advisory. Improper access control for some 3rd Generation IntelR XeonR...

CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...

DEBIAN-CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...

UBUNTU-CVE-2022-2048

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources lef...

BookWyrm 跨站脚本漏洞

BookWyrm is a social reading platform. A cross-site scripting vulnerability exists in BookWyrm versions prior to 0.4.1, which stems from not properly cleaning up the html presented to the user, and is exploited by an attacker to perform cross-site scripting attacks...