Malicious code in safe-nonce-7218 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e864553aef6b02164be2545e5e92bc8443d5eea8820f88a44a30f84a773c8e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5905 Malicious code in safe-nonce-6218 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b26fc284064f9aad0b6e5f8e05c9ee3c7d9642783b8431ac1e90a4bcdfc869a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Aruba Networks ArubaOS 代码问题漏洞

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that stems from an XML External Entity Injection XXE vulnerability...

Huatian Power OA suffers from XML Entity Injection Vulnerability

Huatian Power OA belongs to Dalian Huatian Software Co., Ltd. and is collaborative office software OA. An XML entity injection vulnerability exists in Huatian Power OA, which can be exploited by attackers to obtain sensitive information...

Use After Free

libexpat.so is vulnerable to use-after-free. The vulnerability exists due to a lack of entity value validations in the XMLParserFree parameter of the parserCreate function in xmlparse.c. An attacker could exploit it to lead to memory consumption resulting in an application crash...

GHSA-X58J-J539-W8MV Duplicate Advisory: Improper Restriction of XML External Entity Reference in pikepdf

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29421, GHSA-ccgm-3xw4-h5p8. Reason: This candidate is a duplicate of CVE-2021-29421. Notes: All CVE users should reference CVE-2021-29421 instead of this candidate. All references and descriptions in this candidate have been removed to...

ALPINE-CVE-2022-43680

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...

DEBIAN-CVE-2022-43680

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...

UBUNTU-CVE-2022-43680

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...

MAL-2022-5898 Malicious code in s3mock-testsupport-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da701e874fffc0d3cb4edaa4561c630f6837ad971b3852258c4cf999277f4442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-801 Malicious code in aae-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36e873811e988aacce5a1b80244d157a56da0753c128f1d7581878716119c230 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

libexpat 资源管理错误漏洞

libexpat is a streaming XML parser written in C. A resource management error vulnerability exists in libexpat version 2.4.9 and earlier versions, which stems from over-corrupting a shared DTD in XMLExternalEntityParserCreate in an out-of-memory scenario resulting in memory reuse after release...

MAL-2022-6298 Malicious code in state-counter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed067327832149a5e0aad36c3c4bd179c16890786155c7261ecab0d6f2cfe1d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4926 Malicious code in not_lost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9e56b17309a25e73d214aa824495431574af8954e3f84a6e4ee485775b9b63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2484 Malicious code in discord-leveldb-dump (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55c25e70b31ec78486080577de7c7b2e78cde9b35d84eb84b869160ecb3af8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-455 Malicious code in @nexthink/apollo-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3596f839602da6a9bf358c4e2d46e8b16727da99621ec65e3986e417e8f6186b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-465 Malicious code in @nexthink/engage-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 261969d8ab7bb5c57be893d75d5ac868b4c43fa2be37c4d22e0a97838b8e21ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-462 Malicious code in @nexthink/data-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f188943d8227d8913a6413c93f5a6c9f6e0246b043ca4ff832de679014a59b06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-473 Malicious code in @nexthink/nxnavigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b45d0cc1ab4ad9811a9bef522b6f472032fc9b39875098b18a99fd880c5384 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-40304

A flaw was found in libxml2. When a reference cycle is detected in the XML entity cleanup function the XML entity data can be stored in a dictionary. In this case, the dictionary becomes corrupted resulting in logic errors, including memory errors like double free...