MAL-2022-212 Malicious code in @dsgn-sys/editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7fe3693887a0b35be470744969abc99f121ce0eb8036ce3f5eef87d8cf515c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for golang-x-sys (FEDORA-2022-1da581ac6d)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-x-sys (FEDORA-2022-725ac93b48)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-x-sys-0-23.20220604gitbc2c85a.fc35

Go packages for low-level interactions with the operating system...

[SECURITY] Fedora 36 Update: golang-x-sys-0-23.20220604gitbc2c85a.fc36

Go packages for low-level interactions with the operating system...

PT-2022-19828 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS versions 4.0.202204.a and below Description: The issue is related to an information leak in the component /views/directive/sys/SysConfigDataDirective.java. Recommendations: For PublicCMS versions 4.0.202204.a and below, consider...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2021-3712 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2021-3712 Source advisory: OSV:GHSA-Q9WJ-F4QW-6VFJ...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2021-3711 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2021-3711 Source advisory: OSV:GHSA-5WW6-PX42-WC85...

compu (>=0.1.0 <=0.2.0), fie (>=0.16.0 <=0.16.3) +2 more potentially affected by CVE-2020-36846 +1 more via compu-brotli-sys (=0.1.3)

compu-brotli-sys CARGO version =0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on compu-brotli-sys and may be impacted: - compu =0.1.0, =0.16.0, =1.0.0, =1.0.10 Source cves: CVE-2020-36846, CVE-2020-8927 Source advisory: OSV:GHSA-5V8V-66V8-MWM7...

new packages: perl-Sys-Syslog

An update is available for perl-Sys-Syslog. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: perl-Sys-MemInfo

An update is available for perl-Sys-MemInfo. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: perl-Sys-CPU

An update is available for perl-Sys-CPU. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

Poultry Farm Management System 1.0 Shell Upload

Title: Poultry Farm Management System 1.0 Remote Code Execution RCE Author: Hejap Zairy Date: 20.07.2022 Vendor: https://www.sourcecodester.com/php/15230/poultry-farm-management-system-free-download.html Software:...

CVE-2022-25457

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function...

PT-2022-17295 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.2.21 Description: A stack overflow issue was discovered via the ntpserver parameter in the SetSysTimeCfg function. Recommendations: For Tenda AC9 version 15.03.2.21, consider restricting access to the SetSysTimeCfg...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2022-0778 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2022-0778 Source advisory: OSV:GHSA-X3MH-JVJW-3XWX...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2022-0778 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2022-0778 Source advisory: OSV:RUSTSEC-2022-0014...

CVE-2022-25555

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service DoS via the ntpServer parameter...