Input validation

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to missing integrity checks, an attacker can manipulate the content of the emulated CD-ROM drive containing the Windows and macOS client software. The content of this emulated CD-ROM drive is stored as an ISO-9660 image in...

CVE-2022-28385

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to missing integrity checks, an attacker can manipulate the content of the emulated CD-ROM drive containing the Windows and macOS client software. The content of this emulated CD-ROM drive is stored as an ISO-9660 image in...

CVE-2022-28385

Affected products: Verbatim Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1 and Fingerprint Secure Portable Hard Drive (Part Number #53650). Root cause: missing integrity checks allow manipulation of the ISO-9660 image stored in hidden USB drive sectors that backs the emulated CD-ROM c...

MAL-2022-4735 Malicious code in multisig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb9c4b4228a3a5f5b0a57247fb0920a79451a4f5b183a7568412f2d8be3a61b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4608 Malicious code in misk-web-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b30cdf42b390fade729b29ee9371cd54ab7a9fa1e59b1595ffaf83f1ca153d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4611 Malicious code in misk-web-tab-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae44bd45f2d6f157c92c9718c7782e0c142805e9ced92eb727a61c1e72098c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6723 Malicious code in ual-reactjs-renderer-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f103cbd42e4c8208e6cc75f422cc09ce4766ad160032a8fbd7529826851757 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1160 Malicious code in atlassian-sketch-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 127fce48a3621d82c27eb14ee5dfa2aa7084e2b7c2cff9fe775be9063948f9eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4032 Malicious code in jira-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78600b96da64ce05b13bb5f2b89c1fc3458eea5abaad43f36d2784cb8926d938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-899 Malicious code in ai-cluster-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 165c5a055288b4932756fd081fce1f6543298e05678ed783c2c798bcec22579a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7358 Malicious code in yoti_2020 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41fbfb14efe2e116f592623716f4c4a245d5a7c0a1b58913cef95948e649ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2889 Malicious code in even-more-externals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d88bdc74cdae01727c6412359657971e95af66b3580bb8c50c0a28540f34de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2319 Malicious code in dai-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15e0d4642284079938bd042d736693e64abcfd337e72af8de6cfb7dff3505ce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3868 Malicious code in internal-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d4583bea88824ef161eff89fddcfcad1437c405b759199306bc71b55930db9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2308 Malicious code in d2l-rubric-polymer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffe4a4a3c695e3f39e87fbc9f464c883e8275ec033acd22a40cc3190a97d201a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4780 Malicious code in nab-packages-react-utils-nab (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8120362995adcf1dfb405249ecc06115b8f7bd48d9d3a2e81c3b601830d66c9e Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

CVE-2022-29483

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

CVE-2022-29483

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

CVE-2022-28702

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

Design/Logic Flaw

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...