Missing Release of Memory after Effective Lifetime

DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsing. Sending specific requests to the dcmqrdb program incur the memory leak. An attacker can use it to launch a DoS attack...

CVE-2022-24444: Hybridsessions does not expire session id on logout

More info at https://www.silverstripe.org/download/security-releases/cve-2022-24444...

CVE-2022-28803: Stored XSS in link tags added via XHR

More info at https://www.silverstripe.org/download/security-releases/cve-2022-28803...

GHSA-P782-XGP4-8HR8 golang.org/x/sys/unix has Incorrect privilege reporting in syscall

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Reporting in syscall. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible. Specific Go Packages Affected golang.org/x/sys/unix...

CVE-2022-34295

totd before 1.5.3 does not properly randomize mesg IDs...

CVE-2022-34300

In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData...

MAL-2022-5908 Malicious code in sageone_api_ruby_sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67c460c228e823f0c5c8ff20c43b3bea00ea76438eb77c1f2d539619b7354d2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4563 Malicious code in merlin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50d7dcf4fcdd9219988153659111f9f161edaceb483c6642ac3ef3c334038c31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7204 Malicious code in wm-salesforce-lightning-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 735b5048c03ae40bcbc9cf73fafbc170efb003b51a37240dcd3b1ac3b48e0971 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2131 Malicious code in commonweb-dynamic-routing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71b93dd72fab608c353b277edc3606970d23565abb0aa6f79b894e88f1da1d1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-576 Malicious code in @sbtweb/chat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98da8f5b939eeb94617bce10dd625c39b582c21f0057799cdc2ae93196291802 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-981 Malicious code in amplify-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c45ca3aa689f3135c4de255dcae8c501fc865a035dd4832c534f21488f8b8ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5185 Malicious code in package_avvo_dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57ebf9b1d3ac13c81686e8068798777d8031bd6a284c289d8cbbac82edd8a54b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3554 Malicious code in hakunamatata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17980f9b4fe3a1de259bb126feddb0d277473b6aaedc68c17f1e36a126c9b118 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4463 Malicious code in majortest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9caaf59d9a436b5fdd83c090c397dcfa7d088e36c36150176cc13656416610c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5724 Malicious code in redox-sample-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdfcea410bd0098b0575e6d4dee47cf9f4d4afbc2087c9a1fb51a622cf29d682 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6221 Malicious code in sovryn-node-integration-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d8a316d21d24dc79e10223d3c0b2e58efb32ba31dc62b9d09efedcc39a14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6335 Malicious code in stripe-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eed5067e542e3a2fdea5c5b545e9cae51b61ab515bc883d8e743c28d6b31038f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5791 Malicious code in ricos-editor-no-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e8a7f053bb5cc48e3ba19ffaaaa72dc32fd0f1abbc14f5f39a215d86e8b5575 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4505 Malicious code in mattermost-qa-automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b92a1becee2f263bb902780bb7140c11ff72d0d7d6441727158a003361dacd54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...