GSD-2022-1002566 xprtrdma: treat all calls not a bcall when bc_serv is NULL

xprtrdma: treat all calls not a bcall when bcserv is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002541 staging: rtl8712: fix uninit-value in usb_read8() and friends

staging: rtl8712: fix uninit-value in usbread8 and friends This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002534 cifs: fix potential deadlock in direct reclaim

cifs: fix potential deadlock in direct reclaim This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

GSD-2022-1002530 nbd: call genl_unregister_family() first in nbd_cleanup()

nbd: call genlunregisterfamily first in nbdcleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

Fund migration should trigger a rebase to prevent missing out on potential rewards

Lines of code Vulnerability details Impact Rebasing allows the protocol to "distribute" profit/rewards to Yieldy and Foxy token holders by increasing the supply of tokens and increasing the balance of each token holder relative to the token balance creditBalances. The order of rebasing and...

Malicious code in luc1f3rhk1-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0132343e5096ec1c7558fa700c505b841930fe5cc1546d0289d4ea7c53826f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in res-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a93597f1f8b3cccc9c9376c46c7c4bb4aa253d0a1023a670719749e01333d541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1610 Malicious code in block-utxos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e70c6a7180039569d10a362b93afb6e7327163558b46d4e3605503c9a4459596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odata-discriminator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265529bcc74ef5bda572c9fde28874a801e8ce0977e3981dbc87bbc3f2df2500 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in omar-evil-test-rpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e5e94c35a9358e80839da1d1e54bf442ee12222b449aba7928ce4e04e801056 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @specials/match-media (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e0f5386f94497eb0315d2358c99de8c51a9f6b76e96ba9d77f5dccc7f41949a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in browser-wurfl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e4c2fbc661ad78d8cf71c3cde8ba31549ab0506e14c420f979915c639387d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-845 Malicious code in adaptivecards-designer-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856c233e2f24035efd8d882b600a5c0242af1ed5eea2fda4eca7f5cad6d01e6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sportsbook-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 406d6055f3ec798d94c6267c0cd303138551c345c9b059490e045de4768579be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cooley/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7a79bf065ea338d9aad1f17927b89d85d6c6670396eb353f79a3008c107c54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

YearnCurveVaultOperator's depositETH can leave the remainder ETH funds frozen and unaccounted for, then utilized by another caller

Lines of code Vulnerability details depositETH effectively do not control the utilization of input token and can freeze WETH input funds in native ETH form on the contract balance when Yearn pool doesn't perform liquidity addition for any reason. Due to presence of the additional WETH - ETH step,...

Security Bulletin: Potential module resolution error in DataPower Operator

Summary IBM has addressed a potential build-time issue. This did not affect product code, but may have been detected in customer scans. Vulnerability Details CVEID:CVE-2022-23773 DESCRIPTION: An unspecified error with not treating branches with semantic-version names as releases in cmd/go in Gola...

EulerOS 2.0 SP5 : rsyslog (EulerOS-SA-2022-1914)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted...

Design/Logic Flaw

In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it introduces a potential exposure, but it is not a vulnerability. If exposed, we recommend each customer assess the potential severity specific to your environment. In 9.0, the...

CVE-2022-32155 Universal Forwarder management services allows remote login by default

In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it introduces a potential exposure, but it is not a vulnerability. If exposed, we recommend each customer assess the potential severity specific to your environment. In 9.0, the...