10309 matches found
Malicious code in action-create-release-pr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1f9c096fa3bf9d38477488398a8d49d517f96c85896b4312ef8e8771336c43a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in blockchain-classic-wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c000c341f611720d733afdd0b5e7047b7d04edbe07d873702ca63594a9d60b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in blockchain-wallet-ios (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115182d6218da72cd6f3f3460eadba87a00de07f6df9bca534a220605fd26c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in epam-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fde824f3d16819175b7781da6c196f7ad067667235e2c8663a656a8debecb58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in datadog-agent-github-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9002ec7ae8e71f521014b440d4e81aea944c0c36aca8f9cd4c01bd5e609626cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Joplin Cross-Site Scripting Vulnerability (CNVD-2022-66492)
Joplin is an open source notes and to-do list application. versions prior to Joplin Desktop App 1.8.5 are vulnerable to a cross-site scripting vulnerability, which stems from improper html cleanup and can be exploited to execute arbitrary code...
USN-5485-1 linux, linux-aws, linux-aws-hwe, linux-aws-5.13, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.13, linux-azure-5.4, linux-azure-fde, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-gcp-5.13, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe, linux-hwe-5.13, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-intel-5.13, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oracle, linux-oracle-5.13, linux-oracle-5.4 vulnerabilities
It was discovered that some Intel processors did not completely perform cleanup actions on multi-core shared buffers. A local attacker could possibly use this to expose sensitive information. CVE-2022-21123 It was discovered that some Intel processors did not completely perform cleanup actions on...
USN-5484-1 linux vulnerabilities
It was discovered that the Linux kernel did not properly restrict access to the kernel debugger when booted in secure boot environments. A privileged attacker could use this to bypass UEFI Secure Boot restrictions. CVE-2022-21499 It was discovered that a race condition existed in the network...
Joplin 跨站脚本漏洞
Joplin is an open source notes and to-do list application. versions prior to Joplin Desktop App 1.8.5 are vulnerable to a cross-site scripting vulnerability, which stems from improper html cleanup and can be exploited to execute arbitrary code...
ALPINE-CVE-2022-21166
Incomplete cleanup in specific special register write operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
ALPINE-CVE-2022-21127
Incomplete cleanup in specific special register read operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
DEBIAN-CVE-2022-21127
Incomplete cleanup in specific special register read operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-21127
Incomplete cleanup in specific special register read operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
UBUNTU-CVE-2022-21127
Incomplete cleanup in specific special register read operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
UBUNTU-CVE-2022-21123
Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-21123
Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
Information disclosure
Incomplete cleanup in specific special register read operations for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-21127
CVE-2022-21127 involves incomplete cleanup in specific Intel processor special register read operations, potentially enabling information disclosure to an authenticated local user. The vulnerability is associated with Intel microcode issues and has been referenced in multiple advisories (e.g., De...
