GSD-2022-1004710 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...

GSD-2022-1004585 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

GSD-2022-1004413 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...

GSD-2022-1004197 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

Malicious code in promoaline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc5346dc9691cc6e2403841237cbb3e4d3caf9ab5bd91c266ebe4fa9cfc2491e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kmauqkvxzsgifpbj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13bd0d5ed37547a70635cd57a9e6d88220e552bc9eff761922713d585cecd655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1602 Malicious code in bkmcjhroagplxsne (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae88ab118672cde3a5bd798c768d4da5661ae382512e2ff5bd50dfed4ee75ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

onERC721Received() could delegatecall to transder the tokens

Lines of code Vulnerability details onERC721Received could delegatecall to transder the tokens Impact Some onERC721Received could use delegatecall to drain the tokens Putty holds. Because the msg.sender is Putty contract, the tarnsfer can go through. Or taking the ownership of the Putty contract...

MAL-2022-369 Malicious code in @jmfe/jm-jdshare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c571712f8527aa8540f22703eca787cdf1428dbf55294919e32cbc99bc2032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4460 Malicious code in mailrupush (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e073d4169bf61ba92c2aa5db63f85cf394eb92ae948a1c409315bcbedb58bf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 027d825425483fff57ba210dd3db1881e2e5c0b2b70f2bf98553320d1bfde920 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6238 Malicious code in splitsoftware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ad35b9c145bad6f82667ea92999ab0608a42c73b8db804560c5f63f5b8cb805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @naugtur/callhome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d00d12ab0f67b97f954da6ddadb10d69a44b7ea6c21a6edd065c1df424c1661d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sfdx-plugin-baseline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f4456b51bee2b1a647a07a3effecf0e031d79ef05ba68f817fc018ce0626ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-library_ml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211d410acb51baf1d8b2941b50887775578aa2b6927e968394f02ee31ee2b7ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adyen-web-drop-in-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50407732a88b3180b0f5c503247688cb6507f9badeee6d4591e0689d946e160e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wjaxx-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 392e3fd1216c7bf2253425db13141817e74a391c8944db3673d435eb3cbe5e14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5188 Malicious code in page-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c160990eea879201a1e564d8dbf6e0fa9871f0eaaa38b2f4d45e379e45820a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noshellatall2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51044a30358947c3efa16d2baaae31b931dbd20fe6e62d9337f39fd5597a3ca5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jest-utils-lwc-internals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c648c3492e79706f76e42a3e0ee3bf0d79e36fc2996157477622d919419e8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...