CVE-2022-37617: Improperly Controlled Modification of Object Prototype Attributes

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

PT-2022-24029 · Thlorenz · Browserify-Shim

Name of the Vulnerable Software and Affected Versions: thlorenz browserify-shim version 3.8.15 Description: The issue is related to a prototype pollution vulnerability in the resolveShims function within the resolve-shims.js file of thlorenz browserify-shim. This vulnerability is exploited via th...

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

Malicious code in node_resolve_index_4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8be7ea03bc81bcad9f6fe805739562d98d955154ff91cd7d75255868f01ac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node_resolve_index (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a1ceae10597b78717c9ec88f3ff2896ec117126cbd5a43968948da49b8870ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ManageEngine OpManager getDNSResolveOption Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ManageEngine OpManager. Authentication is required to exploit this vulnerability. The specific flaw exists within the getDNSResolveOption function. The issue results from the lack of proper validatio...

Cross-site Scripting (XSS)

jsoup is vulnerable to cross-site scripting. The vulnerability exists in resolve function in StringUtil.java because the jsoup cleaner is not properly sanitized when SafeList.preserveRelativeLinks is enabled which allows an attacker to inject and execute arbitrary javascript...

go-toolset:ol8 security and bug fix update

delve 1.7.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.7.2-1 - Rebase to 1.7.2 - Related: rhbz2014088 golang 1.17.12-1 - Update Go to version 1.17.12 - Resolves: rhbz2109182 1.17.10-2 - Clean up dist-git patches - Resolves: rhbz2109173 go-toolset 1.17.12-1 - Update Go to...

Malicious code in lolo0093 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b217ff3070d15495ece17597428c8f6c0fe37aa9a41c452888bbed1b219fe28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

2022-06 Cumulative Update for Windows 10 Version 21H1 for ARM64-based Systems (KB5016139)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Malicious code in dazaar-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec481e9d8850ed6a32f1615cfedcbe3607058c591c669780f6ba7bbbf4c2183e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2359 Malicious code in dazaar-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec481e9d8850ed6a32f1615cfedcbe3607058c591c669780f6ba7bbbf4c2183e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in resolve-linked (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36a50ec7a5671b4c6a2183d6844d7e68453b7021417ea7262cce2f0b503fa0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5766 Malicious code in resolve-linked (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36a50ec7a5671b4c6a2183d6844d7e68453b7021417ea7262cce2f0b503fa0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6195 Malicious code in snyk-resolve-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4aee3d2a4454c7a1edc1eb75aa97b985eb7a29056b115d2556bf743099ab559 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snyk-resolve-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4aee3d2a4454c7a1edc1eb75aa97b985eb7a29056b115d2556bf743099ab559 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

2022-06 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5014699)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin

An XML external entities XXE vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side...

2022-04 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB5012591)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2022-04 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5012599)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...