1555 matches found
Malicious code in dco-bot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df58cd3871074ca88952cb9f0b8a69f7b28de8e0eae69a383867d2eb48db891d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-config-hfd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3ab662789e5678f00a08aa799ce7ca12d5c4aa08c4ed2589397d2237ae147e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2468 Malicious code in dig-fonts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68842e49cf80a3814d14c9cf0b93f4d6faf7d874cf521eb295c4ab3a167bbed0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-654 Malicious code in @tinkoff-react-bui/highlighter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f35ba0953c3d1b55af3ac66481e856e15f84300b58641282f67339e9fa1bbb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5531 Malicious code in purview-catalog (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90b0032f8cf0b6d31990e681337cb6df917888cbf11cc64df4990956bdae3b5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-24876
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Kanban is a GLPI view to display Projects, Tickets, Changes or Problems on a task board. In versions prior to 10.0.1 a user can exploit a cross site scriptin...
CVE-2022-31030 vulnerabilities
Vulnerabilities for packages: ctop...
GHSA-5FFW-GXPP-MXPF vulnerabilities
Vulnerabilities for packages: ctop...
MGASA-2022-0199 Updated ffmpeg packages fix security vulnerability
This update provides ffmpeg version 4.3.4, which fixes several security vulnerabilities and other bugs which were corrected upstream...
GHSA-HP87-P4GW-J4GQ vulnerabilities
Vulnerabilities for packages: thanos-operator, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, thanos-operator-fips...
Malicious code in ual-content-page (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0e062a5264ae40c85a311a097fdae78c7ea205dd058a5f59f25859075c6c121 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-0611
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11...
GHSA-X5M6-JH4R-34MV Hub Package Arbitrary File Overwrite
The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file...
MGASA-2022-0049 Updated lrzsz packages fix security vulnerability
lrzsz before version 0.12.21rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a sizet to wrap around. CVE-2018-10195...
Command Injection in node-windows
lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter...
Dolibarr has unspecified vulnerabilities
Dolibarr is an application. A modern software package that helps manage your organization's activities. a security vulnerability exists in Dolibarr, which stems from allowing HTML injection in admin limits.php in Dolibarr 7.0.2. No details of the vulnerability are currently available...
SUSE-SU-2021:4161-1 Security update for python-Babel
This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal that may lead to arbitrary locale files loading and arbitrary code execution bsc1185768...
Hitachi Energy PCM600 Update Manager
1. EXECUTIVE SUMMARY CVSS v3 6.7 Vendor: Hitachi Energy Equipment: PCM600 Update Manager Vulnerability: Improper Certificate Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to bypass the certificate validation and install an untrusted software...
Airangel Hsmx Gateway Remote Code Execution Vulnerability
Airangel Hsmx Gateway is a platform from Airangel UK, Inc. It is used to manage authentication and billing in the network.A remote code execution vulnerability exists in Airangel Hsmx Gateway prior to 5.2.04, which originates when a remote server controlled by an attacker downloads and runs a...