MAL-2022-4071 Malicious code in jsoescheam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14db4656315828c21256fbc1841267536753ba32a1039210c60fd7729715d269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4850 Malicious code in ni5b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35822602157cd00094fc0c3ebf463212a05585c5eed8a1b66f8429c43090f974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3496 Malicious code in gugpconilict (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84188b6003cc02f272b6ce963d87bd147f3511bb03734887e326ba8f356fcf66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3500 Malicious code in guljshint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2631200c464ded493243d1cae6422ded696465305c19a3bb1ef0406cc5299b96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3395 Malicious code in glpsass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb351e3ce5b04603345afe67d08ac13b242fabc9f9e61025dea11a389de65c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3517 Malicious code in gulpposgcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adaf6ec197a9663a551044594d55fceed77cf79de1c75b9a49b4b471d3eb6455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3035 Malicious code in filtetypg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 386be135d7d378dab9967817aa48e57a21ec4e686432ae7b9f517e9e75bfa7b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2844 Malicious code in eslintpwuginjest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6112b771f7ac6d517b8835b1bd113b2cd789e30bf812fab609d48b9e0a15abd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1440 Malicious code in babenlcodre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7941a1e2039b470b3c69fd6f369c6b6b1ffa5610de00611d7479770a51180858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DSA-5212-1 chromium - security update

Bulletin has no description...

Moodle Incorrect Authorization vulnerability

In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course...

CVE-2020-1756

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool...

CVE-2022-35452

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0b2c...

CVE-2022-35010

PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asaninterceptorsmemintrinsics.cpp...

MAL-2022-6211 Malicious code in some-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93e3e8aded4487aae11e3a9234ede51d925be788d5d20133f908adb9c2f8bea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-5W5X-Q9P5-9QG3 OctoPrint does not have rate limiting on the login page

OctoPrint 1.7.3 and prior does not have rate limiting on the login page, making it possible for attackers to attempt brute force attacks. The severity of this issue is limited by OctoPrint normally running in a restricted LAN. The devel and maintenance branches of the repository have a fix that...

CVE-2022-2824 Authorization Bypass Through User-Controlled Key in openemr/openemr

Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...

Path Traversal

venice is vulnerable to path traversal. The vulnerability exists in the isFileWithinDirectory function of LoadPaths.java, allowing an attacker to access files outside the configured load paths such as /Users/foo/resources/test.png and /Users/foo/resources-alt/test.png when passing the absolute...

DLA-3071-1 libtirpc - security update

Bulletin has no description...

PT-2022-4308 · Microsoft · Azure Rtos Guix Studio

Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to insufficient input validation in the Azure RTOS GUIX Studio development environment. This can allow a remote attacker to execute arbitrary code...