8908 matches found
PT-2023-17469 · Amd · Radeon Software Crimson Relive Edition
Name of the Vulnerable Software and Affected Versions: Radeon Software Crimson ReLive Edition affected versions not specified Description: A potential issue was reported in Radeon Software Crimson ReLive Edition that may allow escalation of privilege. This software falls outside of the security...
MAL-2023-1049 Malicious code in discordd.jss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ba506117e7c7f49158ad840669844fa4e7893e715370eb8bc3fd032617dd36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1047 Malicious code in @oyshoweb/front (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc793cbc35cbd69fb4c7bbb4873d0b7a480c013daa6e004215c2455290cab3e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
AZL-27870 CVE-2022-48579 affecting package clamav for versions less than 0.105.2-2
UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains...
CVE-2022-48579
UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains...
AZL-34592 CVE-2022-48579 affecting package clamav for versions less than 0.105.2-4
UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains...
SUSE CVE-2023-3978
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
cypress-image-snapshot path traversal vulnerability
cypress-image-snapshot is an image snapshot plugin from the individual developer Simon Smith. A path traversal vulnerability exists in cypress-image-snapshot, which stems from a vulnerability that could allow a user to pass a relative file path as a snapshot name and access machines outside of th...
AZL-43555 CVE-2023-3978 affecting package podman 4.1.1-26
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
MAL-2023-1041 Malicious code in vue-router-vue3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d2eb48e80ee684a1f36a9d44f562d8f86ed9df08286f57fdee187de71bf7010 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1035 Malicious code in flot-axis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75e800a2dadaa8f5d0ac8a5db1564e97a702c66176c2da0c537191d88cf8fc81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fca-hrz-reup (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0ffd60e2bdab5d1a78415bd3e9e825324abd5389b013ffabaaac77f4789ad54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in aurora-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4392d1914575e090dacd661c28ce77f65b0f9f82c9389a1fe366f9216a09b0b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1039 Malicious code in storyblok-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44e2fc216a94eece7f4dff23344c885f24361cb497ae18d6c7dde8ba3c4d39a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1032 Malicious code in eslint-config-scp-custom-rules (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73a0feb02dac8e9a44d4dfef753d5e64e20660b0f07333ca0660f422036d468d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1023 Malicious code in test-hacker-sharma (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e719660cef7a5f238345da6413201c023f88d40596fc85983cf0489e0d68fb9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-toolbox-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 422a604d191acbb8c624bc1ef790995e034a891c2bb65d4fdf729675ed8d4ae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1019 Malicious code in rhancis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc33fb78ec5c895246ba386fed24b5d490e42c1679729f9fc95c8d004b397b4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fca-rhancis-pogi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3398b30916ed54737b0f733b7dc0b100065a9059a19ffc24e45ad9690d6d85a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1042 Malicious code in yatai-web-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f548d205122fcfcec01de022463ec287546b7367481a1ec5adb29294e452b8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...