27 matches found
Malicious code in set-egs-backend (npm)
Source: amazon-inspector bbceb6929d59ced3a4df01c1d61f7da54d4d0a85e467329fecd5f44e59d43f32 The package set-egs-backend was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in qa-egs-rollback (npm)
Source: amazon-inspector f069cbe096962a4415247fec584da742da87006805e2e0a12d2e0a080936479d The package qa-egs-rollback was found to contain malicious code. --- Credit: OpenSSF source...
Malicious Package
Overview qa-egs-rollback is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview set-egs-backend is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in egs-trusted-domains (npm)
--- Credit: OpenSSF source...
Siemens SICAM 8 Products
SUMMARY Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICORE for CP-8010/CP-8012 - RTUM85 for CP-8010/CP-8012 - SICAM EGS Device firmware - CPCI85 - SICAM S8000 -...
Malicious code in qa-egs-rollback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f069cbe096962a4415247fec584da742da87006805e2e0a12d2e0a080936479d The package qa-egs-rollback was found to contain malicious code...
Malicious code in set-egs-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbceb6929d59ced3a4df01c1d61f7da54d4d0a85e467329fecd5f44e59d43f32 The package set-egs-backend was found to contain malicious code...
EUVD-2025-37058
Malicious code in qa-egs-rollback npm...
EUVD-2025-37056
Malicious code in set-egs-backend npm...
MAL-2025-49235 Malicious code in qa-egs-rollback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f069cbe096962a4415247fec584da742da87006805e2e0a12d2e0a080936479d The package qa-egs-rollback was found to contain malicious code...
MAL-2025-49237 Malicious code in set-egs-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbceb6929d59ced3a4df01c1d61f7da54d4d0a85e467329fecd5f44e59d43f32 The package set-egs-backend was found to contain malicious code...
PT-2024-13684 · Unknown · Openbmc Firmware
Name of the Vulnerable Software and Affected Versions: OpenBMC Firmware versions prior to egs-1.15-0 OpenBMC Firmware versions prior to bhs-0.27 Description: The issue is an out of bounds read that may allow a privileged user to potentially enable information disclosure via local access...
PT-2024-12501 · Unknown · Openbmc Firmware
Name of the Vulnerable Software and Affected Versions: OpenBMC Firmware versions prior to egs-1.14-0 OpenBMC Firmware versions prior to bhs-0.27 Description: The issue is related to an uncaught exception in OpenBMC Firmware for some IntelR Server Platforms, which may allow an authenticated user t...
PT-2024-5125 · Sicam Egs +1 · Sicam Egs +4
Name of the Vulnerable Software and Affected Versions: CPCI85 Central Processing/Communication versions prior to V5.40 SICORE Base system versions prior to V1.4.0 SICAM CP-8031, CP-8050, SICAM EGS affected versions not specified Description: The issue is related to the lack of necessary...
MAL-2024-2286 Malicious code in egs-trusted-domains (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in egs-trusted-domains (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-31189
Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...
CVE-2023-32280
Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...
PT-2024-1780 · Intel · Openbmc
Name of the Vulnerable Software and Affected Versions: IntelR Server Product OpenBMC versions prior to egs-1.05 Description: The issue is related to insufficiently protected credentials in the IntelR Server Product OpenBMC firmware. This may allow an unauthenticated user to enable information...