CVE-2022-44561

CVE-2022-44561 involves a permission verification flaw in the preset launcher module that allows unauthorized apps to add arbitrary widgets and shortcuts without user interaction. Public sources (NVD/Red Hat/CVE lists) describe a HIGH severity (I=HIGH) with no interaction required. Connected docu...

CVE-2022-44561

The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction...

Huawei EMUI 安全漏洞

Huawei EMUI is an Android-based mobile operating system developed by Chinese company Huawei Huawei. A security vulnerability exists in Huawei EMUI version 12.0.1, EMUI version 12.0.0, and EMUI version 11.0.1. An attacker exploited the vulnerability to add arbitrary widgets and shortcuts without...

MAL-2022-465 Malicious code in @nexthink/engage-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 261969d8ab7bb5c57be893d75d5ac868b4c43fa2be37c4d22e0a97838b8e21ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/ea-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60b0c697d1d8646d11b1ded36191c658ba88dbf0c8720c9588a866f0edc0ed6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/investigations-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baf88ee77a0ebf1861662b0d04227b4f9822c410f2ea95af73ae34283e0c442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-474 Malicious code in @nexthink/remote-action-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86698731809005faec3205f9983a58ba0618524c630cd71a9da2ed96bf1c8582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-463 Malicious code in @nexthink/ea-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60b0c697d1d8646d11b1ded36191c658ba88dbf0c8720c9588a866f0edc0ed6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/engage-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 261969d8ab7bb5c57be893d75d5ac868b4c43fa2be37c4d22e0a97838b8e21ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/apollo-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2442bca6d9a3dd356ea5faa389a7389021876ef535ddd23ff709bb803655af2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 36 Update: efl-1.26.3-1.fc36

EFL is a collection of libraries for handling many common tasks a developer may have such as data structures, communication, rendering, widgets and more...

[SECURITY] Fedora 37 Update: efl-1.26.3-1.fc37

EFL is a collection of libraries for handling many common tasks a developer may have such as data structures, communication, rendering, widgets and more...

September 30, 2022—KB5017389 (OS Build 22621.608) Preview

None None...

September 20, 2022—KB5017383 (OS Build 22000.1042) Preview

None None...

WordPress Core Cross Site Scripting / SQL Injection

Description: SQL Injection via Links LIMIT clause Affected Versions: WordPress Core 6.0.2 Researcher: FVD CVE ID: Pending CVSS Score: 8.0 High CVSS Vector:CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Fully Patched Version: 6.0.2 The WordPress Link functionality, previously known as “Bookmarks”, i...

GHSA-CJ7W-PM77-HVG6 Magento XML Injection vulnerability in the Widgets Module

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Exploitation of this issue does...

Magento XML Injection vulnerability in the Widgets Module

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Exploitation of this issue does...

CVE-2022-34253

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Exploitation of this issue does...

Input validation

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Exploitation of this issue does...

CVE-2022-34253

Adobe Commerce/Magento Open Source instances using Widgets Module versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier, or 2.4.4 and earlier are affected by an XML Injection vulnerability. An attacker with admin privileges can trigger a crafted script to achieve remote code execution without user ...