MAL-2022-3903 Malicious code in internallib_v678 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fad5eff255e4aa8537a898867d022aa72241f3cc26872cb77e10c6c3c1b412ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3898 Malicious code in internallib_v373 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bf90334122ef88ee0345ea9afd546e12627588a02975e0e89847088e26c3e1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3882 Malicious code in internallib_v103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e3b752512a57c4bf6c07b52c5160818bb4f65ac29c733e7b2e56947a61f36f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1491 Malicious code in beaker-virtual-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9674b3ee0c5cba399e69bd052fac29981c040d40efc01382f69c614c3d8a563f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3565 Malicious code in has-bin-entries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dba5e25de7a276690ce5b73aa657d8f8ef53dfcc54f531205cdb92069886e818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-38342

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity XXE vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery SSRF attacks...

Adobe Experience Manager 6.5.0.0 < 6.5.14.0 Multiple Vulnerabilities (APSB22-40)

The version of Adobe Experience Manager installed on the remote host is prior to 6.5.14.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-40 advisory. - Adobe Experience Manager versions 6.5.13.0 and earlier is affected by a reflected Cross-Site Scripting XSS...

PT-2022-24380 · Safe · Fme Server

Name of the Vulnerable Software and Affected Versions: Safe Software FME Server versions prior to v2022.0.1.1 Description: The issue allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery SSRF attacks due to a XML External Entity XXE vulnerability...

CVE-2022-1700

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in the Policy Engine of Forcepoint Data Loss Prevention DLP, which is also leveraged by Forcepoint One Endpoint F1E, Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20...

CVE-2022-1700

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in the Policy Engine of Forcepoint Data Loss Prevention DLP, which is also leveraged by Forcepoint One Endpoint F1E, Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20...

XML External Entity (XXE)

Calcite Core is vulnerable to XML external entity attacks. A remote attacker is able to read the contents of confidential files through the use of SQL functions such as EXISTSNODE, EXTRACTXML, XMLTRANSFORM or EXTRACTVALUE due to insecure business logic in XmlFunctions.java...

MAL-2022-6655 Malicious code in troy-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa7b7e93170b23a3db32c4befa01c8c7042f92359e4c4fd2e156981a34ceb968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2424 Malicious code in dep-incompatible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb537c14147bd009ef50b49f0aa9e6c60e693c01b44667d8b8ce0e9a295fbbe8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2914 Malicious code in example-yarn-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49ed18b898074c0e0df3d8de17008d5edd7e275455865ce1592b1b4bcc76ccd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5844 Malicious code in root-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4cdbe0d6fcda449039e24f1428363107212d964420e5db8a9b3df2090e9e043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4894 Malicious code in node_resolve_index_4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8be7ea03bc81bcad9f6fe805739562d98d955154ff91cd7d75255868f01ac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-FJ2M-W3WV-X9PR Apache Calcite before 1.32.0 vulnerable to potential XML External Entity (XXE) attack

In Apache Calcite prior to version 1.32.0 the SQL operators EXISTSNODE, EXTRACTXML, XMLTRANSFORM and EXTRACTVALUE do not restrict XML External Entity references in their configuration, which makes them vulnerable to a potential XML External Entity XXE attack. Therefore any client exposing these...

Apache Calcite before 1.32.0 vulnerable to potential XML External Entity (XXE) attack

In Apache Calcite prior to version 1.32.0 the SQL operators EXISTSNODE, EXTRACTXML, XMLTRANSFORM and EXTRACTVALUE do not restrict XML External Entity references in their configuration, which makes them vulnerable to a potential XML External Entity XXE attack. Therefore any client exposing these...

CVE-2022-39135

Apache Calcite 1.22.0 introduced the SQL operators EXISTSNODE, EXTRACTXML, XMLTRANSFORM and EXTRACTVALUE do not restrict XML External Entity references in their configuration, making them vulnerable to a potential XML External Entity XXE attack. Therefore any client exposing these operators,...

CVE-2022-39135

Apache Calcite 1.22.0 introduced the SQL operators EXISTSNODE, EXTRACTXML, XMLTRANSFORM and EXTRACTVALUE do not restrict XML External Entity references in their configuration, making them vulnerable to a potential XML External Entity XXE attack. Therefore any client exposing these operators,...