Fedora 36 : mingw-python-OWSLib (2023-ae06b3704c)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-ae06b3704c advisory. Update to OWSLib-0.28.1, fixes CVE-2023-27476. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 37 : mingw-python-OWSLib (2023-8312a80917)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8312a80917 advisory. Update to OWSLib-0.28.1, fixes CVE-2023-27476. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

PT-2023-35710 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: xmlParseContentInternal,...

MAL-2023-56 Malicious code in @sok-brand-sites/common-frontend-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f4c8c64db834f3a9d141af04ecce73e9a889fadbcdb655db23b07c73e2a6145 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-sdk-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab63a2e65735bf69a56d323b1f5f75f5a931d4eed13e9fd4468e38047adb773a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-208 Malicious code in core-site-speed-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1583a2587d4a117d6dc59133fd52c7c8da04f57cd6265a159e8c50da5e82d8bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-848 Malicious code in teams-calendar-webpart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4407eeb60493ba69d7ef590b289a23d09231c321ce9840fe680bc0a0709be8a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-477 Malicious code in globalize-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 514144b6db19f7c434988c7e68adbaa8e4ef05c13fa33bfb9c838210a7442e5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Drupal 9.4.x < 9.4.12 Multiple Vulnerabilities

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.95, 9.4.x prior to 9.4.12, 9.5.x prior to 9.5.5 or 10.0.x prior to 10.0.5. It is, therefore, affected by multiple vulnerabilities: - The Media module does not properly check entity...

Drupal 7.x < 7.95 Multiple Vulnerabilities

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.95, 9.4.x prior to 9.4.12, 9.5.x prior to 9.5.5 or 10.0.x prior to 10.0.5. It is, therefore, affected by multiple vulnerabilities: - The Media module does not properly check entity...

Drupal 10.0.x < 10.0.5 Multiple Vulnerabilities

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.95, 9.4.x prior to 9.4.12, 9.5.x prior to 9.5.5 or 10.0.x prior to 10.0.5. It is, therefore, affected by multiple vulnerabilities: - The Media module does not properly check entity...

Drupal 9.5.x < 9.5.5 Multiple Vulnerabilities

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.95, 9.4.x prior to 9.4.12, 9.5.x prior to 9.5.5 or 10.0.x prior to 10.0.5. It is, therefore, affected by multiple vulnerabilities: - The Media module does not properly check entity...

DRUPAL-CORE-2023-002

The Media module does not properly check entity access in some circumstances. This may result in users seeing thumbnails of media items they do not have access to, including for private files. This release was coordinated with SA-CONTRIB-2023-010. This advisory is not covered by Drupal Steward...

MAL-2023-213 Malicious code in create-zplayer-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab08114950d705a9c06e614cad9bc85b7a08cb276763d392a0fda49461e243c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-183 Malicious code in clientcore-onesrv-serviceclients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1e5e4f399b5f583c06f69a74d76eb6600039d400dd1e2e7d7d721e1aa2cbb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-191 Malicious code in cms-serviceclients-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3150363413ce714345472394bfc28e97eba6d3608025b70b28e9142230cecbd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-194 Malicious code in cms-ui-presentationlogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ed28c883575b30f00714232f671ed736feb78c5dcc8ab6326d2d6eacc20466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-180 Malicious code in clientcore-catalyst-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6664041454d45a2f2b01cb74cb0c4721a9dcafb0080f39a8f4990d700aa9746f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-449 Malicious code in fluent-ui-react-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d4f214d34026a7c88fc092754888c5c4c127f5cead75c2e93a25b2a3e3cc403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-186 Malicious code in cms-businesslogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0db779bc3d95749d4bb288d33d42d6febc864b8ab1ce8b51b5ddba5cfac9298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...