MAL-2022-2989 Malicious code in fe-datalayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8575029c8170302c57286bcf94e6258c9dd4ece53a9482f3d22b465d90993ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2987 Malicious code in fe-avaya-chat-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad58ce0cefa333c185defb16a8c738dca22fbea13e605da6ea94772080dd4d4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-avaya-chat-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad58ce0cefa333c185defb16a8c738dca22fbea13e605da6ea94772080dd4d4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2990 Malicious code in fe-fabric-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3453c10ca6302d8952b312f07044dcf2673f1377efe9325fcbb1b74f0bfded99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-fabric-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3453c10ca6302d8952b312f07044dcf2673f1377efe9325fcbb1b74f0bfded99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-621 Malicious code in @talent-journey/tj-fe-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47b2836a71fa5634cdf5d8bb067e519b9a5ca1f8eff64b3142d69c88590b7d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

catalog.santafelibrary.org Cross Site Scripting vulnerability OBB-2623805

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-25754

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

CVE-2022-25753

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

CVE-2022-25753

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

CVE-2022-26334

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

CVE-2022-25754

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

CVE-2022-25755

Siemens SCALANCE X-300/XR3xx family devices are affected by CVE-2022-25755 due to the webserver missing specific security headers, enabling an unauthenticated remote attacker to potentially extract confidential session information under certain circumstances. Affected models span SCALANCE X302-7/...

PT-2022-3574

Name of the Vulnerable Software and Affected Versions SCALANCE X302-7 SCALANCE X304-2FE SCALANCE X306-1LD FE SCALANCE X307-2 SCALANCE X307-3 SCALANCE X307-3LD SCALANCE X308-2 SCALANCE X310 SCALANCE X320-1 FE SCALANCE X408-2 SCALANCE XR324-4M SCALANCE XR324-12M SIPLUS NET SCALANCE X308-2 Descripti...

SQL Injection Vulnerability in FE Business Assistance Platform (CNVD-2020-69477)

Zhuhai Feiqi Software Co., Ltd "Feiqi Software", founded in 1998 formerly Zhuhai UFIDA Software Co., Ltd. was founded in 1998, is a software vendor focusing on the research, development and service of industry collaboration and integration platform. A SQL injection vulnerability exists in FE...

@boyuai/fe-base (>=0.37.0, <=0.42.6), @boyuai/markdown (>=0.1.0, <=0.6.0) +29 more potentially affected by unknown CVE via markdown-it-texmath (>=0.4.7, <=0.8.0)

markdown-it-texmath NPM version =0.4.7, =0.37.0, =0.1.0, =0.1.1, =0.2.1, =0.0.1, =0.0.7, =1.0.0, =2.15.3-alpha.0, =1.1.0, =0.1.0, =0.1.0, =0.6.0, =1.3.5 - @navanjr/vuetify-markdown-editor 1.0.0 - @suehok/vuetify-markdown-editor 3.3.4 and more Source cves: unknown CVE Source advisory:...

fe-mail.gr Cross Site Scripting vulnerability OBB-1307734

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2020-9280

Name of the Vulnerable Software and Affected Versions ONAP SDC versions through Dublin ONAP Operations Manager OOM setups affected versions not specified Description An issue was discovered in ONAP SDC, allowing an unauthenticated attacker with access to pod-to-pod communication to execute...

CVE-2019-12119: Missing Authentication for Critical Function

An issue was discovered in ONAP SDC through Dublin. By accessing port 7000 of demo-sdc-sdc-wfd-fe pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

PT-2020-9283

Name of the Vulnerable Software and Affected Versions ONAP SDC versions through Dublin ONAP Operations Manager OOM setups affected versions not specified Description An issue was discovered in ONAP SDC, allowing an unauthenticated attacker with access to pod-to-pod communication to execute...