kernel: sfc: fix considering that all channels have TX queues

In the Linux kernel, the following vulnerability has been resolved: sfc: fix considering that all channels have TX queues Normally, all channels have RX and TX queues, but this is not true if modparam efxseparatetxchannels=1 is used. In that cases, some channels only have RX queues and others onl...

MAL-2022-459 Malicious code in @nexthink/arm-jwt-decoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51df48a51ecff12b69c9a30fb95f37dcd19cbf557c11e050fb5cd202e6a1d8be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iconape (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d57f3407957138b96309d3b47da05b8801a335251c498af9f9cf3bc23122171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information Disclosure

moodle/moodle is vulnerable to information disclosure. The vulnerability exists because the activity attempts report does not properly filter by groups in the getreport function of manager.php, allowing an attacker to reveal the information about attempts or users in groups to non-editing teacher...

Moodle No groups filtering in H5P activity attempts report

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to...

UBUNTU-CVE-2022-40316

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to...

Malicious code in @aszxc/npmexp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab85bce5e9320af8931b9f78df12a6100f617489104954c09d31741851602bf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Mitigations are being announced to address CVE-2020-4839 and CVE-2021-29695

Summary IBM products 8335-GCA, 8335-GTA, and 8335-GTB have identified security vulnerabilities. Vulnerability Details CVEID:CVE-2020-4839 DESCRIPTION: IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged...

MAL-2022-5114 Malicious code in opy-wepback-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0779d4a870d9770efbfaba7658ea8582d5ae3023a91fa9a0ccdbe5483daf414b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4797 Malicious code in nedemqiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2788c34504c4a52ba0cfc8adca81a433683ca4c1ba46465879154eccb845c1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1572 Malicious code in bignumbnev.jr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c95e2b5477e4e9220d07f8dcfc6a655dd211cf9b3c68eeb3aaf5cdf9a09eb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3exprem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252908f80d8eff01a9d51b3bf56b78fced88d7c7ef0030fd6daeceef3d1d5a62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lodastdefaults (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f527912f4ca74a298e0ecb11a1bd37dd4956495493652f1bfc280ed59431c41c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fuirebagseadmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f17847db0ad2df972b996bae94ebf155fcb4bbbba3e23aa23987ce8ca85823 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2245 Malicious code in crosse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2abc10fe50429ed3ede3fe0efbb03a6a8ae7e2bad45a73b00a2b5f9a4d54af57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1018 Malicious code in ansiescapeks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a1633640448675746fb9efe81a2c89a8f87d0919652f8dda4edba0ca668b0ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7136 Malicious code in whevent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381abfc1981a4deb39aee2d7d2435a396a738d8ab2c7e86d619c4c55f252c1d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lwc-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98e335481687ce6c9f293923692ec4f19da6a49f4d5fe8c014625761fe5a23cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-902 Malicious code in ai-image-tagging-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8ef7b0545eaa94432484debf73c757fbdcb6c21231a5a250f30afac3c5a8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GSD-2022-1004799 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.253 by commit...