MAL-2022-1519 Malicious code in bfx-facs-db-mongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7673e8b6a14af3814a12ce10f7a83cb13821adae60918e914bca452b1bf8cc7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in bfx-facs-db-mongo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in bfx-facs-db-mongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7673e8b6a14af3814a12ce10f7a83cb13821adae60918e914bca452b1bf8cc7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1480 Malicious code in bcoin-mongo-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87b09d27793d80c018b01839a3055f8291ea7e7399a2986a040821aa9f141dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in bcoin-mongo-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in bcoin-mongo-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b87b09d27793d80c018b01839a3055f8291ea7e7399a2986a040821aa9f141dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1481 Malicious code in bcoin-mongo-models (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60b502cd2230d7460f774b28808ee0919a97069cc001cd8dc7465a3a0f8ba937 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in bcoin-mongo-models

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in bcoin-mongo-models (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60b502cd2230d7460f774b28808ee0919a97069cc001cd8dc7465a3a0f8ba937 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mongo.rabbit.bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef04fad2f4cc89e04245dbb8e3687a649270fe37322fcdb204d24c2a54398277 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.twitter.ambrose:ambrose-common (>=0.2.0, <=0.3.0), com.twitter.ambrose:ambrose-hive (>=0.2.6, <=0.3.0) +8 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (0.22.0)

org.apache.hadoop:hadoop-common MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - com.twitter.ambrose:ambrose-common =0.2.0, =0.2.6, =0.2.0, =1.0.0, =1.0.5 -...

PT-2022-4943 · Unknown · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions prior to 5 Rocket.Chat versions prior to 4.8.2 Rocket.Chat versions prior to 4.7.5 Description: An information disclosure issue exists due to insufficient input validation in the actionLinkHandler method, allowing Message...

ch.software-atelier:simpleflex-auth (>=2.1.1, <=2.2.4), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +227 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.11.0, <=3.11.2)

org.mongodb:mongo-java-driver MAVEN version =3.11.0, =2.1.1, =0.1.28, =0.1.0, =1.0.0-rc1, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.1.8, =5.1.8, =5.6.2, =5.6.4 and more Source cves: CVE-2021-20328 Source advisory: GHSA-RGHW-6PX2-FGWC...

ch.software-atelier:simpleflex-auth (>=2.1.1, <=2.2.4), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +227 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.11.0, <=3.11.2)

org.mongodb:mongo-java-driver MAVEN version =3.11.0, =2.1.1, =0.1.28, =0.1.0, =1.0.0-rc1, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.7.9, =5.1.8, =5.1.8, =5.6.2, =5.6.4 and more Source cves: CVE-2021-20328 Source advisory: OSV:GHSA-RGHW-6PX2-FGWC...

ai.tripl:arc-mongodb-pipeline-plugin_2.12 (>=1.3.0, <=1.4.0), be.personify.iam:personify-scim-server (>=1.1.5.release, <=1.2.5.release) +346 more potentially affected by CVE-2021-20328 via org.mongodb:mongo-java-driver (>=3.12.0, <=3.12.7)

org.mongodb:mongo-java-driver MAVEN version =3.12.0, =1.3.0, =1.1.5.release, =1.3.0, =1.3.0, =1.2.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =3.13.0, =3.13.0, =3.15.3, =3.16.3 - ch.exense.step:step-controller-plugins-measurements-jdbc 3.15.3 - ch.exense.step:step-controller-plugins-measurements-log 3.15....

mongo-rest-api (0.1.0), pine-ql (>=0.1.0, <=0.5.4) potentially affected by CVE-2020-28272 via keyget (1.0.1)

keyget NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keyget and may be impacted: - mongo-rest-api 0.1.0 - pine-ql =0.1.0, =0.5.4 Source cves: CVE-2020-28272 Source advisory: OSV:GHSA-8MP8-28XH-R486...

mongo-rest-api (0.1.0), pine-ql (>=0.1.0, <=0.5.4) potentially affected by CVE-2020-28272 via keyget (1.0.1)

keyget NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on keyget and may be impacted: - mongo-rest-api 0.1.0 - pine-ql =0.1.0, =0.5.4 Source cves: CVE-2020-28272 Source advisory: GHSA-8MP8-28XH-R486...

com.twitter.ambrose:ambrose-common (>=0.2.0, <=0.3.0), com.twitter.ambrose:ambrose-hive (>=0.2.6, <=0.3.0) +8 more potentially affected by CVE-2016-5001 via org.apache.hadoop:hadoop-common (0.22.0)

org.apache.hadoop:hadoop-common MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - com.twitter.ambrose:ambrose-common =0.2.0, =0.2.6, =0.2.0, =1.0.0, =1.0.5 -...

Fedora: Security Advisory for golang-mongodb-mongo-driver (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-mongodb-mongo-driver (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...