1350 matches found
MAL-2022-1500 Malicious code in bender-event-definition-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34653c1ba22351b2fe72571bdf5c06c7131816a2112c3281e6f56ae78bcd6feb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bender-event-definition-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34653c1ba22351b2fe72571bdf5c06c7131816a2112c3281e6f56ae78bcd6feb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OESA-2022-1716 qemu security update
QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 including. It could occur in fdctrltransferhandler in hw/block/fdc.c while processing DMA read data...
OpenStack Mistral DoS
A Denial of Service DoS condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service...
CVE-2022-31261
An XXE issue was discovered in Morpheus through 5.2.16 and 5.4.x through 5.4.4. A successful attack requires a SAML identity provider to be configured. In order to exploit the vulnerability, the attacker must know the unique SAML callback ID of the configured identity source. A remote attacker ca...
Malicious code in com.unity.render-pipelines.high-definition-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c67f837ca8ea83c83003168af81c90f02e07a73994e832484930baf383acb5b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Apple TV 缓冲区错误漏洞
Apple TV 4K and Apple TV HD are both products of Apple Inc.Apple TV 4K is a smart set-top box. The Apple TV 4K is a smart set-top box used to launch 4K Hdr images.Apple TV HD is a high-definition television set-top box product.... A buffer error vulnerability exists in Apple TV 4K, Apple TV 4K 2n...
GHSA-R2XF-W5PJ-9PW8 Apache Syncope JEXL Code Injection
Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition," "user / role templates," and "account links of resource mappings."...
Apache Syncope JEXL Code Injection
Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition," "user / role templates," and "account links of resource mappings."...
Vulnerability of the MySQL Server component: The MySQL Server database management system’s DDL functions allow attackers to compromise the integrity of protected information or cause service failures.
Vulnerability of the MySQL Server component: The MySQL Server database management system has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities allows an attacker to compromise the integrity of protected information or cause service failures...
The Importance of Defining Secure Code
The developers who create the software, applications and programs that drive digital business have become the lifeblood of many organizations. Most modern businesses would not be able to profitably function, without competitive applications and programs, or without 24-hour access to their website...
CVE-2022-28890
A vulnerability in the RDF/XML parser of Apache Jena allows an attacker to cause an external DTD to be retrieved. This issue affects Apache Jena version 4.4.0 and prior versions. Apache Jena 4.2.x and 4.3.x do not allow external entities...
Vulnerability of the Server component: The MySQL Server database management system, which allows a hacker to cause service interruptions.
Vulnerability of the MySQL Server component: The DDL system for managing databases, MySQL Server, is vulnerable due to insufficient validation of input data. Exploitation of this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
GHSA-JQX5-H2HW-5Q4F Denial of Service in Apache POI
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service OutOfMemoryError exception and possibly JVM destabilization via a crafted length value in a Channel Definition Format CDF or Compound Fi...
Ransomware Attacks: Everything You Need to Know
By Waqas Learn everything there is to know about ransomware attacks. We cover the definition, statistics, and ransomware protection. Even… This is a post from HackRead.com Read the original post: Ransomware Attacks: Everything You Need to Know...
OpenAPI Missing MIME Types
OpenAPI specification is an API description format for REST APIs. An OpenAPI file is written in YAML or JSON and describes all the API properties like the available endpoints with the related operations or the authentication methods. The consumes field defines the expected data types for POST, PU...
libxml2: Use-after-free of ID and IDREF attributes
A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XMLPARSEDTDVALID option and without the XMLPARSENOENT option, resulting in a use-after-free issue...
libxml2: Use-after-free of ID and IDREF attributes
A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XMLPARSEDTDVALID option and without the XMLPARSENOENT option, resulting in a use-after-free issue...
AZL-9493 CVE-2022-21425 affecting package mysql for versions less than 8.0.29-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...
Vulnerability of the Server component: The DDL system for database management in MySQL, which allows a hacker to cause a service failure.
Vulnerability of the Server component: The DDL system for managing databases in MySQL is vulnerable to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service interruptions...