MAL-2022-2378 Malicious code in ddc-new-relic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 724b8e2d9bbce93045922539d67f166495a0abac1fe3d410e5cea2ec861e82d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29645

The CVE-2022-29645 entry concerns TOTOLINK A3100R devices. Connected sources confirm the affected models: V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129. The underlying issue is a hard coded root password stored in the component /etc/shadow.sample, enabling unauthorized root access. CVSS dat...

GHSA-CQ9M-RPM5-27M9 Jenkins Perfecto Mobile Plugin stores credentials in plain text

Jenkins Perfecto Mobile Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support, Red Hat Enterprise Linux 7.6 Telco Extended Update Support, and Red Hat Enterprise Linux 7.6 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

CVE-2021-37851

CVE-2021-37851 is a local privilege escalation in ESET Windows products where an unpatched installer repair flow can be abused to execute code with higher privileges. Affected are ESET NOD32 Antivirus, Internet Security, Smart Security Premium (11.2 prior to 15.1.12.0) and ESET Endpoint Antivirus...

cockpit: authenticates with revoked certificates

A flaw was found in Cockpit in the way it handles the certificate verification performed by the System Security Services Daemon SSSD. This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List CRL configuration or the certificate status. The...

kernel: HID: mcp2221: prevent a buffer overflow in mcp_smbus_write()

A buffer overflow vulnerability has been found in the linux kernel, such that when calling mcpsmbuswrite, a buffer of a smaller size is called when performing memcpy, resulting in damage to confidentiality, integrity, and availability of the system...

Eaton Intelligent Power Manager

1. EXECUTIVE SUMMARY CVSS v3 5.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Eaton Equipment: Intelligent Power Manager IPM v1 Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code...

CVE-2020-14120

CVE-2020-14120 affects Xiaomi MIUI: a vulnerability in a Xiaomi app caused by missing checksum when third‑party apps pass parameters, enabling attacker‑driven installation of a malicious app that could gain elevated privileges and disrupt normal system services. No specific exploit details or pat...

Microsoft Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows is a windowed operating system developed by Microsoft Corporation. Microsoft Windows DNS Server remote code execution vulnerability can be exploited by attackers to execute arbitrary code on the system...

Microsoft Remote Procedure Call Runtime Remote Code Execution Vulnerability

Microsoft Remote Procedure Call Runtime is a technology used to create distributed client/server programs from Microsoft Corporation USA. The vulnerability can be exploited to execute arbitrary code on the system...

CVE-2022-26358

CVE-2022-26358 affects the Xen hypervisor (IOMMU: RMRR VT-d and Unity Mapping for AMD-Vi). Issues arise when a device with Reserved Memory Regions remains accessible, potentially causing DMA/interrupts to trigger IOMMU faults or memory corruption. Connected advisories document multiple vendors (S...

Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65625)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting.A code execution vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to execute arbitrary code on the system...

CVE-2021-36293

Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admin may potentially exploit vulnerability and gain elevated privileges...

Bentley MicroStation CONNECT Code Execution Vulnerability (CNVD-2022-65025)

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting. A code execution vulnerability exists in Bentley MicroStation CONNECT, which could be exploited by an attacker to execute arbitrary code on the system...

Delta Electronics DIAEnergie路径遍历漏洞

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A path traversal...

Remote Code Execution (RCE)

github.com/cri-o/cri-o is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the kernel.corepattern allowing an attacker to achieve container escape and inject maliciously crafted script into the system...

Information Disclosure

paramiko is vulnerable to information disclosure. The vulnerability exists due to lack of sanitization in writeprivatekeyfile parameter in pkey.py which allows a remote attacker to access unauthorized information in system...

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality.

...

TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20074)

A buffer overflow vulnerability exists in TP-LINK TL-WR886N 20190826 version 2.3.8, which stems from the /cloudconfig/routerpost/register function that executes an arbitrary code on the memory An authenticated attacker could use this vulnerability to execute arbitrary code on the system via a...