Malicious code in ulp-watcgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca2306f2b08eccac525e7267c5a81ebc3b47db5067117e0e0422b932b46e8ad1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodmeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02b6f9ef09fb90c7d01ad94978e2b070855298c19a217d23602a4f05adcf8640 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in guljp-notifhy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2febc05dcfcbbe83ac9c785635ea1f3b4824bf05da113931ca026171cd1bdbd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pasportlocal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26a730bc216b4615346330ee532f7e40037486edfddbd3bd3db06cc1b447108b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Jenkins Compuware ISPW Operations Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

DEBIAN-CVE-2022-1920

Integer overflow in matroskademux element in gstmatroskademuxaddwvpkheader function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite...

Malicious code in lxqrwcnvsgkbjfuo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5097a71a4c186f0180450a58b5fe1ba8b3295fe1b9ddad0d1761dc04af5f716a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vkchtoewspkjrfld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9714a5dfba8b824c7635de9bfed3a9d446315111e7d60dc0355c94a09ea3e0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skyscanner.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 562fc699118e25f03d6d6a536e7fc3223d2afc25b8f930b3c473541a554652a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2022-230

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

CVE-2017-20110

A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown functionality of the component Administration. The manipulation as part of JSON leads to information disclosure Credentials. The attack may be launched remotely...

GSD-2022-1003416 mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()

mtd: rawnand: intel: fix possible null-ptr-deref in ebunandprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003344 misc: ocxl: fix possible double free in ocxl_file_register_afu

misc: ocxl: fix possible double free in ocxlfileregisterafu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003051 pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()

pinctrl: renesas: rzn1: Fix possible null-ptr-deref in shpfcmapresources This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002782 mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe()

mtd: rawnand: cadence: fix possible null-ptr-deref in cadencenanddtprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002729 misc: ocxl: fix possible double free in ocxl_file_register_afu

misc: ocxl: fix possible double free in ocxlfileregisterafu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

CVE-2017-20093

A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely...

Malicious code in appsuite-mailvelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4833766ea043d5189b52f8af3c115146d6ed213456aa255f61dad7e1fce127a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typescript-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fd01680acd5ac536606370cb0a9eaf14a150178414753fd844e79b3f9db5259 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in website-overview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0b47af7f2f591961353f35fc8a4f9da89ae85d9e4d9cccf0656a0561d2b899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...