XXE vulnerability in XSLT transforms in `org.hl7.fhir.core`

XSLT transforms performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external...

XXE vulnerability in XSLT transforms in `org.hl7.fhir.core`

XSLT transforms performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external...

HL7 FHIR IG Publisher Artifacts 安全漏洞

HL7 FHIR IG Publisher Artifacts is an open source tool from Health Level Seven International for obtaining a set of inputs. A security vulnerability exists in HL7 FHIR IG Publisher Artifacts versions prior to 6.3.23, which stems from vulnerability to an XML external entity injection attack, where...

XXE vulnerability in XSLT transforms in `org.hl7.fhir.core`

XSLT transforms performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external...

MAL-2024-8825 Malicious code in hyperion-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfaf98b1da6db2cef1cd44d1a761b02f9c3c4e93ecfb3bf8d8ffd70570c2305e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8823 Malicious code in com.meta.xrpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 368c4215055d53b01fa4f0e947a03d5f6b2cdd01a2a9be147dd9c074e53b6208 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sigma-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3261ce8608a1d5df2dc6eea25790460c5c3acc3ff03c223d4ece32c799bde4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8824 Malicious code in cui-i18n-coke (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d912c30c0e2cc9b0fa735da2459d298a8d3c2d49355bf85a7c8deb6532ece228 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Vulnerabilities in PostgreSQL affect watsonx.data

Summary For CVE-2012-1618, when a user-provided input for JDBC statement parameters is not properly escaped, remote attackers can perform injection attacks which can affect watsonx.data. For CVE-2020-13692, the PostgreSQL JDBC Driver could allow a remote authenticated attacker to obtain sensitive...

DRUPAL-CONTRIB-2024-035

This module enables you to "clone" a content entity, i.e. to create a new content pre-filled with data from another entity of the same type and bundle. The module doesn't properly check the user access to the original entity, allowing users to create a new entity they have permission to create...

MAL-2024-8809 Malicious code in walletv5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cff4fcd790dbc7787f055e2be040f8484d848c82fd64688f5b2aa4edf6e2b932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8813 Malicious code in xwuirit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df36d2af53be006f85a47e0a26683a059038c7f0135c497743b6b0c318d7f1b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8740 Malicious code in asowieo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b2426aa5e61b730fccaddcc53a450fcfb8f7e1ca4dfb450b6bf5848cccef12a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8816 Malicious code in ywpeirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7bb3df4329eb6ef5da8694013edde70bd0e1a2aaba9c23e5b1cd487f7995899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lioejre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2210c252fdd314dcf9fb63873b09b4cb94666ac597611b36276f4b2f8d5fb1cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8778 Malicious code in jsowuer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 111fb7600e81b5a50f008078826db3ae508544bb41cb3afcc72c3266cb08eab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8814 Malicious code in yieoure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f176ea13b2f71d0abec94a832a04bd1b6eaf649327498706c32b92c616ee7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8786 Malicious code in msldowr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1deb49453f6e6cb108bcccf73c381e5b3769656cbed465b1353f2759312937ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8792 Malicious code in operuwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09a71d29f868f8f81375931308abc2355b990138765dc5b65c662d33f11884b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8769 Malicious code in gyowuie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3b9b3baa048f299d8b93a4ab33b070fdaefbec33091e47b98c1b8f83f14a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...