10299 matches found
Malicious code in misk-web-tab-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f8bdce8a484e3fb50743ce65adf482eff7579242d3c8f9c8f3e9aac45097b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ual-reactjs-renderer-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f103cbd42e4c8208e6cc75f422cc09ce4766ad160032a8fbd7529826851757 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in pgk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bd09d5ca236379e4cd89c623eb39b9c097c93150c939493acea1f97ca70260e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
USN-5471-1 linux-oem-5.17 vulnerabilities
It was discovered that the Linux kernel did not properly restrict access to the kernel debugger when booted in secure boot environments. A privileged attacker could use this to bypass UEFI Secure Boot restrictions. CVE-2022-21499 Aaron Adams discovered that the netfilter subsystem in the Linux...
A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.
...
Malicious code in orangeonion.buildtools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01d5d87d4e17da3a852029e3970ff209b44f9254cf8481c4a527feb52b18524a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in enterprise_api_app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1062ee69ef4802a00c855121c3ce6ad16c3da1df88dbee95556f6ddb1aa21540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in perfetto-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6100763973b89540aee1624736a341bc237fd9d4e58872345d6b8b8780fc754 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @clover-microapp/utils-isomorphic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 482eb0aee6eec7e82d910ad31d6b3b39e0f154377bc5ae979f98fa6b984fae01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @logistics-frontend/client-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ec68c4d34cf87350cff78bf89af4256fe327563a079c07c24cc75114db204ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OESA-2022-1684 maven-shared-utils security update
This package can be the functional replacement of plexus-utils in Maven. At the same time, the package has many hightlights, such as: a lot of methods got cleaned up, generics got added and a lot of unused code dropped. Security Fixes: In Apache Maven maven-shared-utils prior to version 3.3.3, th...
The vulnerability of the Metasys Application and Data Server (ADS), Metasys Extended Application and Data Server (ADX), and Metasys Open Application Server (OAS) lies in the incomplete cleanup of session tokens, allowing attackers to obtain session tokens from authenticated users.
The vulnerability of the Metasys Application and Data Server ADS, Metasys Extended Application and Data Server ADX, and Metasys Open Application Server OAS is related to incomplete cleaning of session tokens. Exploiting this vulnerability can allow a malicious actor to obtain the session token of...
Use-After-Free
mariadb is vulnerable to use-after-free. The vulnerability exists in the component Itemfuncin::cleanup which allows an attacker to exploit this via specially crafted SQL statements causing a crash of the system...
jscom RevoWorks 安全漏洞
J's Communication RevoWorks Browser and J's Communication RevoWorks Desktop are both products of J's Communication Japan. J's Communication RevoWorks Browser is a web browser and J's Communication RevoWorks Desktop is a remote office solution. Provides secure browser and virtual desktop...
Halibut Denial of Service Vulnerability
Halibut is a secure, RPC-based open source communication framework. Halibut version 1.2 contains a denial-of-service vulnerability that stems from a mix-up in the cleanupindex directive in index.c, which is responsible for freeing memory. An attacker could exploit this vulnerability to cause a...
Red Hat stackrox 安全漏洞
Red Hat stackrox is a full lifecycle Kubernetes security solution from Red Hat. It allows you to detect, manage, and mitigate security risks, such as misconfigurations, and vulnerabilities CVEs. A security vulnerability exists in Red Hat stackrox that stems from improper stackrox cleanup. An...
DEBIAN-CVE-2021-42612
A use after free in cleanupindex in index.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have other unspecified impact via a crafted text document...
DEBIAN-CVE-2021-42613
A double free in cleanupindex in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact via a crafted text document...
