58 matches found
CVE-2026-19854
A flaw was found in the Grafana ClickHouse plugin. When using the Native protocol with PDC or secure SOCKS, the connection library fails to enforce Transport Layer Security TLS, causing sensitive data such as usernames, passwords, queries, and results to be transmitted in cleartext. This allows a...
EUVD-2026-67089
When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...
CVE-2026-19854
When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...
CVE-2026-19854: Cleartext Transmission of Sensitive Information
When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...
clickhouse-datasource silently drops TLS over PDC
When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...
Malicious code in @zalastax/nolb-pdc (npm)
The package @zalastax/nolb-pdc was found to contain malicious code. --- Credit: OpenSSF source...
Malicious Package
Overview sd-pdc-module-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in sd-pdc-module-client
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-309 Malicious code in sd-pdc-module-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed2d91fb4db4325ed4d7b78f02cb681cc3ce2a9b5de740755a4fb868780d75f The package sd-pdc-module-client was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-3053
Malicious code in sd-pdc-module-client npm...
Malicious code in sd-pdc-module-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed2d91fb4db4325ed4d7b78f02cb681cc3ce2a9b5de740755a4fb868780d75f The package sd-pdc-module-client was found to contain malicious code. Source: ghsa-malware...
Linux Distros Unpatched Vulnerability : CVE-2022-50518
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - parisc: Fix locking in pdciodcprint firmware call Utilize pdclock spinlock to protect parallel modifications of the iodcdbuf buffer, check length to prevent...
Linux arch/parisc/kernel/firmware.c pdc_iodc_print Heap Buffer Overflow
The vulnerability of the pdciodcprint function in the arch/parisc/kernel/firmware.c module of the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...
CVE-2022-50518 parisc: Fix locking in pdc_iodc_print() firmware call
In the Linux kernel, the following vulnerability has been resolved: parisc: Fix locking in pdciodcprint firmware call Utilize pdclock spinlock to protect parallel modifications of the iodcdbuf buffer, check length to prevent buffer overflow of iodcdbuf, drop the iodcretbuf buffer and fix some wro...
CVE-2022-50518
CVE-2022-50518 relates to the Linux kernel parisc/firmware path: the fix locks in pdc_iodc_print() to protect parallel modifications of iodc_dbuf[], validates length to prevent iodc_dbuf[] overflow, drops iodc_retbuf[], and corrects indentation. This resolves a local-impact issue on parisc system...
CVE-2022-50518
In the Linux kernel, the following vulnerability has been resolved: parisc: Fix locking in pdciodcprint firmware call Utilize pdclock spinlock to protect parallel modifications of the iodcdbuf buffer, check length to prevent buffer overflow of iodcdbuf, drop the iodcretbuf buffer and fix some wro...
EUVD-2020-29124
Malware in sbrugna...
EUVD-2020-29111
Malware in sbrugna...