Malicious code in @com.att.dtventertainment/dfw-pm-yo-space-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 806161588999d1c3f730dfe7672f8123c0cd3b6e2b28c00a6463f91ced635766 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @com.att.dtventertainment/dfw-pm-yo-space-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2020-7140

A security vulnerability in HPE IceWall SSO Dfw and Dgfw Domain Gateway Option could be exploited remotely to cause a remote cross-site scripting XSS. HPE has provided the following information to resolve this vulnerability in HPE IceWall SSO DFW and Dgfw: https://www.hpe.com/jp/icewallpatchacces...

Cross site scripting

A security vulnerability in HPE IceWall SSO Dfw and Dgfw Domain Gateway Option could be exploited remotely to cause a remote cross-site scripting XSS. HPE has provided the following information to resolve this vulnerability in HPE IceWall SSO DFW and Dgfw: https://www.hpe.com/jp/icewallpatchacces...

CVE-2020-7140

Technical details about CVE-2020-7140 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2020-7140

A security vulnerability in HPE IceWall SSO Dfw and Dgfw Domain Gateway Option could be exploited remotely to cause a remote cross-site scripting XSS. HPE has provided the following information to resolve this vulnerability in HPE IceWall SSO DFW and Dgfw: https://www.hpe.com/jp/icewallpatchacces...

CVE-2020-7140: Improper Neutralization of Input During Web Page Generation

A security vulnerability in HPE IceWall SSO Dfw and Dgfw Domain Gateway Option could be exploited remotely to cause a remote cross-site scripting XSS. HPE has provided the following information to resolve this vulnerability in HPE IceWall SSO DFW and Dgfw: https://www.hpe.com/jp/icewallpatchacces...

PT-2020-19402

Name of the Vulnerable Software and Affected Versions HPE IceWall SSO Dfw and Dgfw Domain Gateway Option affected versions not specified Description A security issue in HPE IceWall SSO Dfw and Dgfw could be exploited remotely, leading to a remote cross-site scripting XSS attack. Recommendations A...

HPESBMU04011 rev.1 - HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option), Remote Cross-Site Scripting

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dfw 11.0 RHEL and Windows IceWall SSO Dgfw 11.0 RHEL and Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7140 |...

CVE-2017-8989

A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection...

CVE-2017-8989

CVE-2017-8989 affects HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows. The vulnerability enables remote URL redirection. Root cause and vulnerable component details are not elaborated in the provided documents. No remediation or exploit information is present in the supplied materia...

PT-2018-8483

Name of the Vulnerable Software and Affected Versions HPE IceWall SSO Dfw versions 10.0 through 11.0 Description A security issue in HPE IceWall SSO Dfw could be exploited remotely, allowing URL Redirection. Recommendations For HPE IceWall SSO Dfw versions 10.0 through 11.0, update to a version...

CVE-2017-8989: URL Redirection to Untrusted Site

A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection...

HPESBMU03833 rev.5 - HPE IceWall SSO dfw, IceWal MCRP, IceWall MFA Proxy, Remote URL Redirection

Potential Security Impact: Remote: URL Redirection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dfw 10.0 RHEL5, RHEL6, RHEL7, HP-UX, Windows and 11.0 RHEL 7 IceWall MCRP 3.0 RHEL 5, RHEL 6, RHEL 7, HP-UX and 4.0 RHEL 7, RHEL 8 IceWall MFA 4.0 Enterprise Edition MFA...

HPESBMU03806 rev.2 - HPE IceWall Products, Multiple Remote Unauthorized Disclosure of Information, Unauthorized Modificiation

Potential Security Impact: Remote: Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dfw 10.0 Patch 8 HP-UX and RHEL, 10.0 Patch 10 HP-UX and RHEL and 11.0 RHEL IceWall MCRP 4.0 RHEL 7 IceWall MFA 4.0...

CVE-2014-2604

Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2014-2604

CVE-2014-2604 affects HP IceWall SSO 10.0 Dfw and HP IceWall MCRP 2.1/3.0, enabling remote DoS via unspecified vectors. HP’s security bulletin HPSBGN03007 rev.1 documents the vulnerability and lists mitigation steps: disable POST filter function by commenting out POSTFILTER lines in the configura...