MAL-2023-377 Malicious code in fca-anjelo-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2b501824b5dfb70ce9396faf12349f9d1090598f9297bd2c9a727ba1fd02a92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-anjelo-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2b501824b5dfb70ce9396faf12349f9d1090598f9297bd2c9a727ba1fd02a92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-387 Malicious code in fca-ciaro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b8c4702561af39abfcf861c0218fcdf192311718d8e6614a2f2831f10e8d94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-121 Malicious code in ban-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecea46554ceaa591315411d0d3e279f9dab01878d3136b5f7a3e6e44974bb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ban-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecea46554ceaa591315411d0d3e279f9dab01878d3136b5f7a3e6e44974bb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-700 Malicious code in private-dependency-test3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 389e0d778e23798e24433a25dc3f689bb12c1e235b3ebbf17de86d9d50a885b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-463 Malicious code in ftvi-meteo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a10fd36b58b6b7186a2930294601dde7968f6ef78d443df46dc8a0854dba13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-78 Malicious code in action-destinations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96505de3d3aa2e8998dd55d2d3c5571986d30ba16c8bc9971c3f9e8348264ed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IBM Tivoli Workload Scheduler XML External Entity Injection Vulnerability

IBM Tivoli Workload Scheduler is a suite of enterprise task scheduling software from International Business Machines IBM. IBM Tivoli Workload Scheduler suffers from an external entity injection vulnerability that can be exploited by a remote attacker to submit a special request that could obtain...

PT-2023-1706 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a type confusion in the Linux kernel's pick next rt entity function, which may return a type confused entry not detected by the BUG ON condition. This can lead ...

MAL-2023-686 Malicious code in png-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b17176dcbb2ab3f6473fcc6da65635c58f5a95f16e36be1353daf585d861964 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-45588

All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity XXE type of attacks. Users should download the R2022-09 release or later and use it in place of the previous version. Talend Remote Engine Gen 1 and Talend Cloud Engine for Design are no...

Xxe

All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity XXE type of attacks. Users should download the R2022-09 release or later and use it in place of the previous version. Talend Remote Engine Gen 1 and Talend Cloud Engine for Design are no...

Use After Free

libgpac.so is vulnerable to Use-After-Free. The vulnerability exists due to a lack of entity value validations in the m2tsdmxdeclarepid parameter in dmxm2ts.c which leads to memory consumption resulting in an application crash...

MAL-2023-908 Malicious code in ts-messenger-api-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcd86ca9e67b7044c40aab4cc9d48b42d720f8c8ed5d0a1a19d3116874e7e517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-747 Malicious code in rmbg-disme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70d37810d3abbedf9691f2b539c619e9825f41f082b6c15e87f2e14168e60052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-38389

IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233975...

CVE-2022-22486

IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226328...

Xxe

IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233975...

Xxe

IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226328...