CLSA-2023-1675985852 java-1.8.0-openjdk: Fix of 2 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u362-b09. That fixes following CVEs: - CVE-2023-21830: Improper restrictions in CORBA deserialization Serialization, 8285021 - CVE-2023-21843: Soundbank URL remote loading Sound, 8293742 - Update tzdata requirement to 2022g to match JDK-8297804 -...

MAL-2023-859 Malicious code in testnebb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 039da8055a699a92851f48d20facc4851a80857a4f8383e689298429a0883c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-24806

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2023-24806

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

MAL-2023-893 Malicious code in tohe-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b243cab2a6d28350da02c87edd35680ac4d18b7ca5f27ebc765f39a3773c1ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-466 Malicious code in gatorcomponents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8f6b3dfba6b091155d80be64c8691f83194a213887c0069ce15b0092bd630d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-34820 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue is related to the fastrpc component in the Linux Kernel, where a map is not properly removed on creater process and device release. The actual impact and attack plausibility have...

MAL-2023-384 Malicious code in fca-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a7307e2fcfdfd54a28ef285f8a2b91d3ac27e726313b0d0a1590d06eddea09f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-830 Malicious code in taxi-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 097d1cf9ae16e020a782ddabda9f4556107a34ffa87be84afde01f013fe2e52a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-988 Malicious code in yandex-meteo-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad598f1585a297ca8d20439b26fa25afb526a1f69cbdde3832e457b6daa6cf83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-554 Malicious code in kikimrclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f3af1e0dea63ee0477319031489cd73ed7ecee518c1c80c91b8e9194e600db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Amendment This was deemed not a vulnerability. Overview dtautodevweb is a malicious package. Note: This package was uncovered by one of Snyk's automated algorithms, and was since confirmed to be a proof-of-concept package uploaded by a researcher. It has been removed from the ecosystem and does n...

MAL-2023-134 Malicious code in biputils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3bd6095c684fe80e02dad8578e2dbbc75e183a70fbb1753752fffa06065e7b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-128 Malicious code in best-man-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15fa50f52202384b37b1b714460696e713ae0766713264f909b1a18d42847bea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-22498

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

MAL-2023-236 Malicious code in dep_conf_tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81af9f674f57a93af5a9030b8e05949d3ee86a9a5fbb1c98c2ffa3c7384a7344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-241 Malicious code in dependancy_confusion_test_tal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9144894e475b05fd94cf378496c85c5358f742406f2806b68542b333658eecf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-237 Malicious code in dep_confusion_test123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95f5bc391a39cd114fa8cbec14792e02dbc7fdc132c33d675e5fe104568d81d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-235 Malicious code in dep_conf_tal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f17540f057215075d86afa66455fa1f138a3e04be90742219ba083ffdb95f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-689 Malicious code in portal-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274c5bf1b8b6d50340a45e5b6b5fc38ce8f38f3d1c1138d90dca4aa0d1e26ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...