CVE-2022-34191

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

[SECURITY] Fedora 36 Update: collectd-5.12.0-16.fc36

collectd is a daemon which collects system performance statistics periodically and provides mechanisms to store the values in a variety of ways, for example in RRD files...

CVE-2022-34191: Improper Neutralization of Input During Web Page Generation

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.77 and earlier does not escape the name of NetStorm Test parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Jenkins Plugin NS-ND Integration Performance Publisher Cross-site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins NS-ND Integration Performance...

Virtuozzo Hybrid Infrastructure 5.1 Update 1 (5.1.1-61)

This update provides bug fixes and improvements. Vulnerability id: VSTOR-54473 The network orchestration service does not restart after an update. Vulnerability id: VSTOR-54265 Fixes the root cause of the alert "Cluster had blocked or slow replication." Vulnerability id: VSTOR-54066 Fixes the...

Citrix Hypervisor: ACPI Warning: Incorrect checksum in table [BGRT]

hostxxxx kernel: 9.091668 ACPI BIOS Warning bug: Incorrect checksum in table BGRT - 0x2B, should be 0x9C 20180810/tbprint-177...

Malicious code in md-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d6d5be3f70190aacf0f23190e1e0da484a2a9d3df619cf872b9ade12ed5f30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4524 Malicious code in md-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d6d5be3f70190aacf0f23190e1e0da484a2a9d3df619cf872b9ade12ed5f30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6850 Malicious code in usaa-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f74974b841768a8f7cc9be0179b03462de9e741bff43976bfcc8ddfc25e6e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f74974b841768a8f7cc9be0179b03462de9e741bff43976bfcc8ddfc25e6e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6923 Malicious code in videoplayershakaperformancelogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d2832b7b40b0f81bcf38feb52c26aec84528baf1093cc1850d4319af3cd6d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eleventy-high-performance-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4823110842e58cb338449a76f8f597545384ae9c5015c7acd466f5fcbdf1090e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2698 Malicious code in eleventy-high-performance-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4823110842e58cb338449a76f8f597545384ae9c5015c7acd466f5fcbdf1090e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3062c1010daff0de3ecd9277566c8551bd36d82069cdd22ab4f121499b540f46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58c31e90a2d18fa00fa8667905444ac65828ede2b1cf6db09888804b7b191cd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-102 Malicious code in @azure-tests/perf-event-hubs-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f33365f9f452d71317e4ca23088d8eb0525f77ec6bb5fb923d01ebf81efa4f4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE: Security Advisory (SUSE-SU-2022:2107-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

spirv-tools:spvtools_opt_performance_fuzzer: Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=5652264460615680 Project: spirv-tools Fuzzing Engine: libFuzzer Fuzz Target: spvtoolsoptperformancefuzzer Job Type: libfuzzerasani386spirv-tools Platform Id: linux Crash Type:...

CVE-2022-24436

A potential vulnerability in some Intel® processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure. Mitigation Currently, there is no mitigation for this flaw. Intel has provided some guidance to developers of...

SUSE: Security Advisory (SUSE-SU-2022:2072-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...