MAL-2023-459 Malicious code in fr-config-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a3e96cb06aafc753b8adb69cabd8145c6125d89151ff1556f3685e0a99e9e84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-204 Malicious code in concord-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7557a87ec03b1b952655ca887ba93d78eb3e94a2674fbc2e2d2b86fae5272dc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-385 Malicious code in fca-chand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af03b2a119d8eb7ca4a3cff46b7d0cb89e8f3393071411044aec8320b19740b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-381 Malicious code in fca-anjelov5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba1b88950fffb7a31b0198d26986dd299eec7409c8fa228081e1b9a62ea031e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-97 Malicious code in anjelo-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30de88230ce0ff3f6fe0eedbd58411d187242209563a96498e787b4f79dfc7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-98 Malicious code in anjelo-dev2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bec068f3e56304c48c4c48eecfb4eb7fd2c133a59aee2adf16f1fef8d870e18e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-380 Malicious code in fca-anjelov3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d5c2cfcabc91d71e694daa9c1ed247545a624da57ad205f877c620401bf5f73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop in recursive entity expansion. Remediation Upgrade qt to version 5.15.16, 6.5.3 or higher. References - qt Issue...

XML External Entity (XXE) Injection

jetty-xml is vulnerable to XML External Entity XXE Injection. The vulnerability exists because the XmlParser function of XmlParser.java does not sanitize the DOCTYPE declaration, which allows an attacker to inject maliciously crafted XML. Note that it is the vendors position that an attacker woul...

CVE-2023-38197

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion...

DEBIAN-CVE-2023-38197

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion...

CVE-2023-38197

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion...

UBUNTU-CVE-2023-38197

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion...

Privilege escalation

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion...

CVE-2023-38197

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion...

CVE-2023-38197

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion...

CVE-2023-38197

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion...

Qt 安全漏洞

Qt is a cross-platform C++ application development framework from the Norwegian company Qt. It is widely used to develop GUI programs, in which case it is also known as the widget toolkit. Can also be used to develop non-GUI programs , such as console tools and servers. A security vulnerability...

CVE-2023-38197

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion...

Security Bulletin: IBM Match 360 is vulnerable to CVE-2019-10202 and CVE-2019-10172 for jackson-mapper-asl

Summary Match 360 is vulnerable to the following CVEs: CVE-CVE-2019-10202 and CVE-2019-10172 Vulnerability Details CVEID:CVE-2019-10202 DESCRIPTION: Red Hat JBoss Enterprise Application Platform EAP could allow a remote attacker to execute arbitrary code on the system, caused by improper...