MAL-2023-998 Malicious code in yb-trust-butils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a079ba242dc18990e551b011850b9c19eb72eec55d5b09d1842f66a9638d2e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-993 Malicious code in yandex-yt-proto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c9f270b18c048619a98a11ad6711b3ede1d6d8ea3486df6a9825486efcae60c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-997 Malicious code in yb-mongoengine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8829ed9ae2153f8aa56bb3af22519044a987709f41bff6e0dc756734b08d41b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-meteo-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad598f1585a297ca8d20439b26fa25afb526a1f69cbdde3832e457b6daa6cf83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in errorboosterclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6ad53c61c65de783410bb712f1628578d9bb4ce0e63f7bd2acd059433433392 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-578 Malicious code in malicious-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adfb94ffd01d87848b7f1bf2ae04932224574efbda30f7ae3ecd5520c4c57d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

Xxe

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

EulerOS Virtualization 3.0.2.2 : libxml2 (EulerOS-SA-2023-1271)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed ...

Ubuntu: Security Advisory (USN-4774-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Drupal 9.4.x < 9.4.10 / 9.5.x < 9.5.2 / 10.0.x < 10.0.2 Drupal Vulnerability (SA-CORE-2023-001)

According to its self-reported version, the instance of Drupal running on the remote web server is 9.4.x prior to 9.4.10 or 9.5.x prior to 9.5.2 or 10.0.x prior to 10.0.2. It is, therefore, affected by a vulnerability. - The Media Library module does not properly check entity access in some...

XML Entity Expansion in Jenkins TestComplete support Plugin

Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin

Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

MAL-2023-445 Malicious code in flip-flop-flap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5a8c270e03ec6b1b69ecf3fcd5e679b1fb4616f0be367586a4bcd4e47de6f77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Denial Of Service (DOS)

libgpac.so is vulnerable to Denial of Service. The vulnerability exists due to a lack of entity value validations in the descriptors.c which leads to use-after-free resulting in an application crash...

Jenkins Plugin MSTest 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Jenkins Plugin TestComplete support 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...