Malicious code in mrg-nano-xhr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5584946fb8e4619d73092f2d29472ca79e307d08f72e7036028a4d1d4836dd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pfselfservice-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71381704bb6e620499c8d09fed0c00f7f2e9f7912ec16abe576c476a1f7d7ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coffee-to-es2015-codemod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c30e7d3013316733fc720bd497c224af9abb1975bfb75271bd518a44ce11b4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. A resource management error vulnerability exists in Google Chrome versions 90.0.4430.72 through 102.0.5005.63, which stems from a post-release reuse error in the ANGLE component. A remote attacker could...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. A resource management error vulnerability exists in Google Chrome versions 90.0.4430.72 through 102.0.5005.63, which stems from a boundary error in WebGL. A remote attacker could exploit this vulnerabilit...

CVE-2021-44096

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profileaction - updateuser. This allows a remote attacker to compromise Application SQL database...

CVE-2021-44096

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profileaction - updateuser. This allows a remote attacker to compromise Application SQL database...

EGavilan Media Expense-Management-System SQL注入漏洞

EGavilan Media Expense-Management-System is a simple expense management system from EGavilan Media, Inc. An SQL injection vulnerability exists in EGavilan Media Expense-Management-System version 1.0, which stems from vulnerability to SQL injection via / expenseaction.php for SQL injection attacks...

Dell EMC PowerScale OneFS 安全漏洞

Dell EMC PowerScale OneFS is the Isilon OneFS operating system for horizontally scalable NAS from Dell USA. A security vulnerability exists in Dell EMC PowerScale OneFS versions 8.2.0.x through 9.3.0.x, which arises from the creation of an account without a restriction on password strength. An...

Fuji Electric Monitouch V-SFT 资源管理错误漏洞

Fuji Electric Monitouch V-SFT is a screen configuration software from Fuji Electric Japan. A resource management error vulnerability exists in Fuji Electric Monitouch V-SFT versions prior to 6.1.6.0, which stems from a post-release reuse error. A remote attacker could exploit this vulnerability t...

Fuji Electric V-Server 缓冲区错误漏洞

Fuji Electric V-Server and Fuji Electric V-Server Lite are both products of Fuji Electric, Japan.Fuji Electric V-Server is a suite of software for collecting and managing real-time field data.Fuji Electric V-Server Lite is a remote monitoring software for industrial environments. Server Lite is a...

Apple tvOS 资源管理错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A resource management error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which originates from a use-after-release error when processing HTML content in WebKit. A remote attacker could exploit this vulnerabilit...

CVE-2022-29098

Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an account with no password. A remote attacker may potentially exploit this leading to a user account compromise...

Google Android Information Disclosure Vulnerability (CNVD-2022-44553)

Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in l2cbleprocesssigcmd in l2cble.cc, which could result in an out-of-bounds read due to a lack of boundary checking. . The vulnerability can be exploited by attackers to...

OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...

DEBIAN-CVE-2022-21449

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows...

DEBIAN-CVE-2022-21434

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Server is one of the database server components, and MySQL Connectors is one of the drivers for connecting to applications that use MySQL. Server product contains an input validation error...

Oracle Java SE 输入验证错误漏洞

Oracle Java SE is an Oracle Corporation USA Java application for developing and deploying Java applications on desktops and servers, as well as embedded devices and real-time environments. An input validation error vulnerability exists in Oracle Java SE that could allow an unauthenticated attacke...

The vulnerability of the dwarf::cursor::uleb function in the ELF and DWARF parsing library by Libelfin allows a attacker to cause a service failure.

The vulnerability of the dwarf::cursor::uleb function in the ELF and DWARF v4 reading library is related to insufficient elimination of special elements in the request. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created ELF file...