Express.js Cookie-Session Weak Secret Key

Express.js applications with Cookie-Session use an application key to encrypt and sign various data, including session cookies and other sensitive information. This key is typically stored in an environment variable and is used for multiple security-critical operations. When a weak or easily...

CVE-2024-8775 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...

MAL-2024-8854 Malicious code in evolution-ds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 319dd750e62370dfbc8bfdc0a3a2abcf5492d5a599b1a6c67a08ac126170df8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-38642 QuMagie

An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in the following version: QuMagie 2.3.1 a...

MAL-2024-8147 Malicious code in @diotoborg/aspernatur-nihil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba4787ce555c29037ffceab8a4a2541243ce990d4044e396f6eec4982ec77f3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8186 Malicious code in @diotoborg/consequuntur-laboriosam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb49cd0fe77b24fa2166acdb2c6e1d966e2c26cd158b50dc2bd961547f9dfc48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8109 Malicious code in @diotoborg/ad-rerum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2298e095ee31855c1ee771a3ff80e0fb74d27473fc63bb72997365f30c50149 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8489 Malicious code in @diotoborg/occaecati-quibusdam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c5cf48e4c7aac829bb4ba841a50e10d9d62012947f59565c0af9b570c4765c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8171 Malicious code in @diotoborg/beatae-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2144a6481af3dadf78d8903575c2769b737f11a76e4e98b963ef7d988820905f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8293 Malicious code in @diotoborg/esse-rerum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10e40f44d35237a4185dcd9dcfb2b5c42576fee529422393e00a6745855d9052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8163 Malicious code in @diotoborg/autem-dolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d64c1625354d1f6f713c3e11ea7fd948ec9f3ec2bfd8e7eb514a4b8b443fc8bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8138 Malicious code in @diotoborg/architecto-quis-asperiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 816ba768980666c6d91c009857257420aaf4e8226c8ea5d292c8bf0041d4c4fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8684 Malicious code in @diotoborg/vero-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fb2e8e4a6349f91a258ae73ba115417262626ce8cbaea20f02605963832fa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8655 Malicious code in @diotoborg/temporibus-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ce0abddcbedfbdf7fc948b35890f2b3f206a1beb7f9c851f3adf9516aaf3843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8349 Malicious code in @diotoborg/harum-nesciunt-dolores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0a4ec64db17e0dd47d89722dc0d30cd003ed2c3c8336940cf7387df61827ea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8203 Malicious code in @diotoborg/cum-illum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f83e9fe6ebfbe1d3347d2fe4fd6b9c4a54f4cb82b292187610dbc94713ffb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8137 Malicious code in @diotoborg/architecto-at (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a29c5b3d018443809c41d6f30feea371a3ae19082306ba345ca8a475edad5be5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8559 Malicious code in @diotoborg/quia-nulla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61727070a6eb33dd49395695146cd5f8370da804f624957433b2a75b1d17b20f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8096 Malicious code in kak-kupit-kriptovaliutu-v-rossii-cherez-tinkoff-investitsii-s21dt6n0d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 722439ce10201bd57480a22eff49b9404dd698bbc8e34f901c4259142722a1ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-6633

The default credentials for the setup HSQL database HSQLDB for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confidentiality, integrity, or availability of the software. The HSQLDB is only included to facilitate...