MAL-2022-1293 Malicious code in azure-arm-support-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d95c1fb63446240c3b714ac0be6c40ccc9893a87cf6d5a99dda5650cb5dd7026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-support-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d95c1fb63446240c3b714ac0be6c40ccc9893a87cf6d5a99dda5650cb5dd7026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1292 Malicious code in azure-arm-storsimple8000series-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40092f770f19a332399d5c94b87862774a710e240f6644fc95f549c3a6d2fecc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-storagesync-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1efed359b2d3c2ddec29f9ba9698a370e4af0ec65ebdd4a0f5a4c7d553b57ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1281 Malicious code in azure-arm-resourcemover-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66f9357c207a31225a24735bdcfd23e802760ee71fc071cfe94158668c62076b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-resourcegraph-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfeb422210456548ba2a9902ffcd7a41576f4fe22ed8198da3de5d6efdca3350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-privatedns-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72035eff5b92aa316c5274089d2be8ef3bc78986323098bddb3f1e77da75c151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-purview-administration-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad251bd8e2b53e3456bd7b4e683f0cce7e4d2ba5df80e1e3e5978e013ab67eee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4604 Malicious code in minis-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c077b52bdf5ba9829bbb40e34b43aca9f4191c5c87ac682e35e3d0f758763777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in minis-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c077b52bdf5ba9829bbb40e34b43aca9f4191c5c87ac682e35e3d0f758763777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2022-1701 speex security update

Speex is an Open Source/Free Software patent-free audio compression format designed for speech. The Speex Project aims to lower the barrier of entry for voice applications by providing a free alternative to expensive proprietary speech codecs. Moreover, Speex is well-adapted to Internet...

com.antelink.reporter.jenkins.plugin:AntepediaReporter-CI-plugin (>=1.7 <=1.8), com.dubture.jenkins:digitalocean-plugin (>=0.1 <=0.2) +39 more potentially affected by CVE-2014-2066 via org.jenkins-ci.main:jenkins-core (>=1.533 <=1.550)

org.jenkins-ci.main:jenkins-core MAVEN version =1.533, =1.7, =0.1, =1.53, =1.0.0, =0.1, =1.533, =1.533, =1.533, =1.533, =0.1.3, =0.1.5 and more Source cves: CVE-2014-2066 Source advisory: OSV:GHSA-8JFX-H6Q2-V4G3...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5 <=0.7), org.jenkins-ci.main:jenkins-test-harness (=1.513) +4 more potentially affected by CVE-2013-2034 via org.jenkins-ci.main:jenkins-core (=1.513)

org.jenkins-ci.main:jenkins-core MAVEN version =1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

GHSA-626W-HMPW-X74J paypal/invoice-sdk-php reflected XSS

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

paypal/invoice-sdk-php reflected XSS

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

cn.home1:spring-cloud-eureka-server (>=0.0.1 <=1.0.1.U1), com.github.springcloud:moss-client-1.x (=1.0.1.RELEASE) +162 more potentially affected by CVE-2018-1000129 via org.jolokia:jolokia-core (>=1.3.7 <=1.4.0)

org.jolokia:jolokia-core MAVEN version =1.3.7, =0.0.1, =1.2.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =0.1.5, =0.1.5, =2.0-beta-1, =2.3.0, =2.7.1 and more Source cves: CVE-2018-1000129 Source advisory: OSV:GHSA-HFPG-GQJW-779M...

GSD-2022-1001903 samples/landlock: Fix path_list memory leak

samples/landlock: Fix pathlist memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

com.buildcoin.plugins.jenkins:buildcoin-plugin (>=1.0 <=1.4), com.coravy.hudson.plugins.github:github (>=1.1 <=1.8) +99 more potentially affected by CVE-2012-0785 via org.jenkins-ci.main:jenkins-core (>=1.425 <=1.446)

org.jenkins-ci.main:jenkins-core MAVEN version =1.425, =1.0, =1.1, =0.3.2, =1.1, =1.0, =0.1, =1.1, =1.1, =0.2.5, =1.425, =1.425, =1.425, =1.425, =1.446 and more Source cves: CVE-2012-0785 Source advisory: OSV:GHSA-PCHP-C5W8-47GC...

The vulnerability of the Samples component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Samples component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data using the HTTP...

The vulnerability of the Samples component of the Oracle WebLogic Server application server allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Samples component of the Oracle WebLogic Server application server exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...