8036 matches found
Malicious code in centrifuge-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63f2df39cf6522468345009bc1e3efe074e6f0985e6b714ed34125ffb609aa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6445 Malicious code in techdocs-cli-embedded-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6523ca476cc6b141bf6eb3cc01162248af09aeb7f527940ba0927c5961fbf35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cdk-cli-wrapper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f9f4fe9064836db3994b0e2e6eb32cabfee5c17ae2e4a2eb2e333471854fcd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1855 Malicious code in cdk-cli-wrapper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f9f4fe9064836db3994b0e2e6eb32cabfee5c17ae2e4a2eb2e333471854fcd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6097 Malicious code in shopify-cli-extensions-test-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 348b740568cf2750a479f5dced340532a8be5b2f101c7a91b075ba636970b91c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in shopify-cli-extensions-test-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 348b740568cf2750a479f5dced340532a8be5b2f101c7a91b075ba636970b91c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in miew-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea5cd1ed744f747bc00ccfcb2c9b587d0c94ec38dce7fa5e2e70569368030f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cli-e2e (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf3ebaab018a1f346bd035ff329fe505d90fd4783fe0b59983049e513bc40a2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4592 Malicious code in miew-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea5cd1ed744f747bc00ccfcb2c9b587d0c94ec38dce7fa5e2e70569368030f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1921 Malicious code in cli-e2e (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf3ebaab018a1f346bd035ff329fe505d90fd4783fe0b59983049e513bc40a2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Zyxel Buffer Overflow / Format String / Command Injection
-- HNS-2022-02 - HN Security Advisory - https://security.humanativaspa.it/ Title: Multiple vulnerabilities in Zyxel zysh Products: Zyxel firewalls, AP controllers, and APs Author: Marco Ivaldi Date: 2022-06-07 CVE Names and Vendor CVSS Scores: CVE-2022-26531:...
MGASA-2022-0234 Updated php packages fix security vulnerability
CLI -Fixed bug 8575 CLI closes standard streams too early. Core -Fixed Haiku ZTS builds. Date -Fixed bug 8471 Segmentation fault when converting immutable and mutable DateTime instances created using reflection. php-fpm - Fixed bug 72185 writes empty fcgi record causing nginx 502. Mysqlnd - Fixed...
Updated php packages fix security vulnerability
CLI -Fixed bug 8575 CLI closes standard streams too early. Core -Fixed Haiku ZTS builds. Date -Fixed bug 8471 Segmentation fault when converting immutable and mutable DateTime instances created using reflection. php-fpm - Fixed bug 72185 writes empty fcgi record causing nginx 502. Mysqlnd - Fixed...
CVE-2022-1833
A flaw was found in AMQ Broker Operator, installed via UI using the OperatorHub. In this vulnerability, a low-privilege user with access to the Operator deployed namespace has access to cluster-wide edit rights. This flaw allows an attacker to have full cluster management access. Mitigation In...
CVE-2022-32156
In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface CLI did not validate TLS certificates while connecting to a remote Splunk platform instance by default. After updating to version 9.0, see Configure TLS host name validation for the Splunk CLI...
Design/Logic Flaw
In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface CLI did not validate TLS certificates while connecting to a remote Splunk platform instance by default. After updating to version 9.0, see Configure TLS host name validation for the Splunk CLI...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.9.38 packages and security update
Red Hat OpenShift Container Platform release 4.9.38 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9. Red Hat Product Security has rated this update as having a...
CVE-2022-32156 Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation
In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface CLI did not validate TLS certificates while connecting to a remote Splunk platform instance by default. After updating to version 9.0, see Configure TLS host name validation for the Splunk CLI...
CVE-2022-32156
CVE-2022-32156 affects Splunk Enterprise and Universal Forwarder prior to 9.0, where the CLI did not validate TLS certificates when connecting to a remote Splunk platform. The issue’s root cause is missing TLS host-name validation by default, potentially enabling misconfigured nodes to bypass val...
