4395 matches found
Malicious code in azure-data-tables (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a089d92180517cd0c841e0b1e42e271776332b6f9bcc1f4386c18169ec3b6cf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1320 Malicious code in azure-data-tables (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a089d92180517cd0c841e0b1e42e271776332b6f9bcc1f4386c18169ec3b6cf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1321 Malicious code in azure-data-tables-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7368d7ea26dee4585d779dfb147816f903fc6af930ca341c51bf8d58569d1972 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-data-tables-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7368d7ea26dee4585d779dfb147816f903fc6af930ca341c51bf8d58569d1972 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-data-tables-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f12451ce5dfc182de3cf34ae16c5a54d089805c93efabed52b2ee148cd3c379d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1322 Malicious code in azure-data-tables-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f12451ce5dfc182de3cf34ae16c5a54d089805c93efabed52b2ee148cd3c379d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Information Disclosure via Export Module
Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C 4.0 Problem The export functionality fails to limit the result set to allowed columns of a particular database table. This allows authenticated users to export internal details of database tables to which they already have...
Design/Logic Flaw
TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the export functionality fails to limit the result set to allowed columns of a particular database table. This way, authenticated users can export internal details...
CVE-2022-31046
TYPO3 Information Disclosure via Export Module (CVE-2022-31046): The export feature could leak internal details by not limiting the result set to allowed columns. Affected TYPO3 versions include 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, and 11.5.11. Remediation: upgrade to the fixed release...
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
...
SUSE SLES12 Security Update : grub2 (SUSE-SU-2022:2037-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2037-1 advisory. - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that t...
SUSE SLED15 / SLES15 Security Update : grub2 (SUSE-SU-2022:2035-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2035-1 advisory. - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may tak...
SUSE SLES15 Security Update : grub2 (SUSE-SU-2022:2041-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2041-1 advisory. - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that t...
UBUNTU-CVE-2022-26364
x86 pv: Insufficient care with non-coherent mappings This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to...
WordPress Fatcat Apps Easy Pricing Tables plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Fatcat Apps Easy Pricing Tables plugin 3.1.2 and earlier versions contain a cross-site...
Important: kernel
Issue Overview: A flaw was found in the Linux kernel in linux/net/netfilter/nftablesapi.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue. CVE-2022-1015 A flaw was found in the Linux kernel in net/netfilter/nftablescore.c:nftdochain, which can cause...
Oracle Linux 7 : grub2 (ELSA-2022-9469)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9469 advisory. - Add CVE-2022-28736 to the list JIRA: OLDIS-16371 - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735...
AZL-9879 CVE-2022-32250 affecting package kernel for versions less than 5.15.45.1-2
net/netfilter/nftablesapi.c in the Linux kernel through 5.18.1 allows a local user able to create user/net namespaces to escalate privileges to root because an incorrect NFTSTATEFULEXPR check leads to a use-after-free...
CVE-2022-32250
net/netfilter/nftablesapi.c in the Linux kernel through 5.18.1 allows a local user able to create user/net namespaces to escalate privileges to root because an incorrect NFTSTATEFULEXPR check leads to a use-after-free...