4836 matches found
Malicious code in bolt-styles (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40639c5f8b34134db966654cf56e02dd69cd250d3a0d8873dba524ac9c75ae7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in adroit-f0-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d340a87917821f16332cc13efdd1a133abf2f230303f4245672e1e6307a146d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
pmb.ac-noumea.nc Cross Site Scripting vulnerability OBB-2618931
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
vtechome.com Cross Site Scripting vulnerability OBB-2618120
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
oneida-nsn.gov Cross Site Scripting vulnerability OBB-2618002
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
rtfhsd.org Cross Site Scripting vulnerability OBB-2617966
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
singtothebeat.com Cross Site Scripting vulnerability OBB-2617727
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-30415
creationtimestamp| type| source ---|---|--- 2022-05-13 18:32:19+00:00| seen| https://t.me/cibsecurity/42680...
CVE-2022-30417
creationtimestamp| type| source ---|---|--- 2022-05-13 18:27:55+00:00| seen| https://t.me/cibsecurity/42652...
CVE-2021-46787
The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash...
CVE-2022-27134
creationtimestamp| type| source ---|---|--- 2022-05-13 07:26:26+00:00| seen| https://t.me/cibsecurity/42574...
Three zero-days addressed in Microsoft’s May 2022 Patch Tuesday
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Microsoft addressed 74 vulnerabilities in their May 2022 Patch Tuesday Security Update. Three of them are zero-days, and one is being exploited in the wild. The LSA Spoofing vulnerability CVE-2022-26925 is actively exploited i...
TIBCO Security Advisory: May 18, 2022 - TIBCO BusinessConnect Trading Community Management -CVE-2022-22776
TIBCO BusinessConnect Trading Community Management Stored Cross Site Scripting Vulnerability Original release date: May18, 2022 Last revised: --- CVE-2022-22776 Source: TIBCO Software Inc. Products Affected TIBCO BusinessConnect Trading Community Management versions 6.1.0 and below The following...
TIBCO Security Advisory: May 18, 2022 - TIBCO BusinessConnect Trading Community Management-CVE-2022-22777
TIBCO BusinessConnect Trading Community Management Reflected Cross Site Scripting Vulnerability Original release date:May 18, 2022 Last revised: --- CVE-2022-22777 Source: TIBCO Software Inc. Products Affected TIBCO BusinessConnect Trading Community Management versions 6.1.0 and below The followi...
CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog
CISA is temporarily removing CVE-2022-26925 from its Known Exploited Vulnerability Catalog due to a risk of authentication failures when the May 10, 2022 Microsoft rollup update is applied to domain controllers. After installing May 10, 2022 rollup update on domain controllers, organizations migh...
CVE-2022-29987
creationtimestamp| type| source ---|---|--- 2022-05-12 18:35:59+00:00| seen| https://t.me/cibsecurity/42483...
May 10, 2022—KB5013963 (OS Build 10240.19297) - EXPIRED
None None...
Security Updates for Microsoft Visual Studio Products (May 2022)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-24513 - Multiple denial of service DoS vulnerabilities. An...