MAL-2022-1146 Malicious code in ast-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3aab1e48587c9cef92ff9a160fe6e7502511f4c89a090194954839fabc50efb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5621 Malicious code in rdocumentation-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd7c18abaa468c33663ce6c3e956d6d03af4e651a7996d21ec1f5466d8c99fca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5622 Malicious code in rdocumentation-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5eca1c7e61ad7fe3e9bd189771149eeee1859356b1234ff3c84997abed24031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waffles2-presentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df9b87e0c8068e6adc7f5042e9a70ad3d23eb1eb91d5f88045d6c8df74176f98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7032 Malicious code in waffles2-presentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df9b87e0c8068e6adc7f5042e9a70ad3d23eb1eb91d5f88045d6c8df74176f98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d413678735916efe26eb4cd4c106907b9e0fdce0f0bd3c41706a4a64e9b9139 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3560 Malicious code in hardhat-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d413678735916efe26eb4cd4c106907b9e0fdce0f0bd3c41706a4a64e9b9139 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4454 Malicious code in mailchimp_transactional (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f09b20df613e38f8309a248103c6111bad857f0c53559f588f4a7dcd9953149 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Global Entities feature /index.php?module=entities/entities of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New Entity"...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for October 2022

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 21.0.3-IF014 and 22.0.1-IF004. Vulnerability Details CVEID:CVE-2022-32214 DESCRIPTION: Node.js is vulnerable to HTTP request...

CVE-2022-31678

VMware Cloud Foundation NSX-V contains an XML External Entity XXE vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure...

Xxe

VMware Cloud Foundation NSX-V contains an XML External Entity XXE vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure...

VMware NSX for vSphere (NSX-v) < 6.4.14 Multiple Vulnerabilities (VMSA-2022-0027)

The version of VMware NSX for vSphere NSX-V installed on the remote host is prior to 6.4.14. It is, therefore, affected by multiple vulnerabilities, including: - VMware Cloud Foundation contains a remote code execution vulnerability via XStream open source library. CVE-2021-39144 - VMware Cloud...

VMware Cloud Foundation 代码问题漏洞

VMware Cloud Foundation is an all-in-one hybrid cloud platform from VMware. The platform includes features such as operations automation, infrastructure auto-configuration and integrated lifecycle management. A security vulnerability exists in VMware Cloud Foundation NSX-V that stems from the...

CVE-2022-31678

VMware Cloud Foundation NSX-V contains an XML External Entity XXE vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure...

MAL-2022-4662 Malicious code in modern-hardhat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96c131c39f2ccb7fe9bbb345454bfd7e287a9e8f2340eab60bb225d75be91833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-6234 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to access sensitive...

Malicious code in safe-nonce-7218 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e864553aef6b02164be2545e5e92bc8443d5eea8820f88a44a30f84a773c8e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5905 Malicious code in safe-nonce-6218 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b26fc284064f9aad0b6e5f8e05c9ee3c7d9642783b8431ac1e90a4bcdfc869a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Aruba Networks ArubaOS 代码问题漏洞

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that stems from an XML External Entity Injection XXE vulnerability...