1265 matches found
PT-2022-13611 · Hewlett Packard · Myhp +1
Name of the Vulnerable Software and Affected Versions: HP Jumpstart affected versions not specified Description: A potential security issue has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP recommends that customers uninstall HP Jumpstart and use myHP...
ansible-freeipa bug fix and enhancement update
An update is available for ansible-freeipa. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ansible-freeipa package provides Ansible roles and playbooks to...
MAL-2022-464 Malicious code in @nexthink/engage-branding (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb79566cb954829c3d41fcdbddd4922dd59511f8bf5215ff4b113c19fd60d526 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-459 Malicious code in @nexthink/arm-jwt-decoder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51df48a51ecff12b69c9a30fb95f37dcd19cbf557c11e050fb5cd202e6a1d8be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5824 Malicious code in rn-amazon-payment-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55dc607d7f550e21e91f6f04e1b1aed4b17e87f68d49c8f20d4fd3f413cbcc5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-34102
Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can pause the uninstallation of an executable to gain a SYSTEM level command prompt...
PT-2022-22006 · Crestron · Crestron Airmedia Windows Application
Name of the Vulnerable Software and Affected Versions: Crestron AirMedia Windows Application version 4.3.1.39 Description: An insufficient access control issue was found in the Crestron AirMedia Windows Application. This issue allows a user to pause the uninstallation of an executable, resulting ...
MAL-2022-2553 Malicious code in docusaurus-plugin-name (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 232063f9bf78828e30e0c8bb7374c02a90b0a6bf29118093c955b5412deadddf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-1697
Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation...
The vulnerability of the Uninstall Protection function of the Crowdstrike Falcon endpoint protection software allows a malicious actor to remove the CrowdStrike software.
The vulnerability of the Uninstall Protection function of the Crowdstrike Falcon endpoint protection software is related to the implementation of an incorrect management flow. Exploiting this vulnerability could allow a malicious individual to remove the CrowdStrike software without using a valid...
MAL-2022-6584 Malicious code in tioredks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82288406f42e0b41e971b9c88fd0ad2e804534b72a105b490c59b8848cae6035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3524 Malicious code in gulpyostcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79c97be24aaf3e5a3ff83cf1d2ac08827ce0972da931a4bfe671ceb044fc268 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3971 Malicious code in isprgomise (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8adf40c4bcc3b052d6d6b47469c272f9f32fa4309628473f06d22743ee4fb675 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2309 Malicious code in d3isellction (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02b9a907b8021128b9ca40ad898622e9c7b6130ab3196e752f8e9bb309743463 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1931 Malicious code in clispmner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da6cbc1deeb9e8625bfa8359622f41cc2c72dc3abffedda4d8bc7dbdcf32c2ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6837 Malicious code in usaa-dls-build-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcc1ba2931e747b56e50e4acd7a8f7b19a8e670c5d73f5aff6eef5bc0a3803f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Intel® Team Blue App Advisory
Summary: A potential security vulnerability in the Intel® Team Blue mobile application may allow information disclosure. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Team Blue mobile application. Vulnerabili...
Vulnerabilities fixed in Scooter Software Beyond Compare
Vulnerabilities have been fixed in Scooter Software Beyond Compare. The vulnerabilities allow a malicious person to execute arbitrary execute arbitrary code under the SYSTEM user's privileges and the obtain elevated user privileges. For the vulnerability with attribute CVE-2022-36414, it is only...
GHSA-C2PJ-RR68-PW94 Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin
An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. Version 1.11.2 contains a patch for this issue...