Opencast < 9.10, 10.x < 10.6 Log4j RCE Vulnerability (GHSA-mf4f-j588-5xm8, Log4Shell)

Opencast is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

XWiki 11.3.7 < 13.10.4, 14.0 < 14.2 Privilege Escalation Vulnerability (GHSA-g4h6-qp44-wqvx)

Xwiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescripti...

GHSA-C4R9-R8FH-9VJ2 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...

Grafana Image Renderer Vulnerability (GHSA-2cfh-233g-m4c5)

Grafana is prone to a vulnerability in Grafana Image Renderer. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

GHSA-GP7F-RWCX-9369 vulnerabilities

Vulnerabilities for packages: dotty...

GHSA-GP7F-RWCX-9369 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

Malicious code in winrpcexploit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46976ed2bca7738154d7f53ebb0e98864eafcf5753fc7753b509c6ce4d9ac9b4 Security researchers at Check Point Research discovered a malicious package called WINRPCexploit. PyPI has since removed WINRPCexploit...

Malicious code in alexhostx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73f7b0bdadd7c2cbda6f78c816e3a95364e9fa57e28228da281a2ffa393cc8c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vuez-template-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faf4115988e70fed761d8f3611ce6b309fa2efe3560f15a0a66e9471e34fe3b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6337 Malicious code in style-componenx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb248124090511a5f3edf33939c7877e6c001e2305b954ec69b81df52fbd63dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tinhcyxolor2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1785ffaf0cf123331ff5d3e407a7290b6407ef4bd4d6a1d949bc1efb235a8a60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sanitize-figlgname (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca5849d98166b6a940b4358ec6234c96c72b43cb608091c1a443d1a8512fa99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sint-plugin-prkomise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92604a6c1cf3f8e7444a92b0663c0b7cdb89fd4cde855bf03b8f7a64cb15d82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5858 Malicious code in rstify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92f56e88cbd77d0f5cb238f8cda7b351d4564657eb97496a793a6237fdf01253 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5684 Malicious code in reacta-ollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 825fd3f747fc9038be3ca4b98812ee56a1a54a97edcc9eb91bbdbab57cdf3c96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4975 Malicious code in nuique-random-arr-y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8944275bf57308caccda8e710df70f752ccdb2562e0efb3bad97812ea26eee3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opy-wepback-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0779d4a870d9770efbfaba7658ea8582d5ae3023a91fa9a0ccdbe5483daf414b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p4assport-oatuh2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6da214a63821a7ae511bd719c7e410d2564980e0c8bdd8bb4ca9089f6f6bc444 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in isomorphi-cetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e1e43045eadbf99f5d51f8f96699e59c9865577b1351c4fab7b826366b109e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4527 Malicious code in mdz5-ile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e81722271fad554385db5283e1a49f5431f4e38d1d8f8a95c0e276558ccbdf28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...