Malicious code in wixstore-client-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eced25a4252e07dbdd89a6ef0bf234832933e07c4601b5a1a030291f3f52ec7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in do-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e3f62afc5a0e156f1d494428d69ca44add0e96c5df1557efe3d3de41fe61ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2544 Malicious code in do-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e3f62afc5a0e156f1d494428d69ca44add0e96c5df1557efe3d3de41fe61ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in module-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2581f7c50b25c20ae5834198173ce194fa7238eeeb9f1a542ddbb4e9dc55c59a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4261 Malicious code in launchdarkly-cloudflare-worker-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de576cf63a8f34f8fc17ce760973d6f5164d2bd3ddac3fe040cd53568d5ca332 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4667 Malicious code in module-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2581f7c50b25c20ae5834198173ce194fa7238eeeb9f1a542ddbb4e9dc55c59a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in launchdarkly-cloudflare-worker-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de576cf63a8f34f8fc17ce760973d6f5164d2bd3ddac3fe040cd53568d5ca332 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6981 Malicious code in vso-service-worker-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 521d9c0aa9e811392cdcb626e976bbd45fb4f70615153f303716350975b432b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vso-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb422332a19aeef03b4767503a00b97068dcb0b6f6119143f0060dae741b750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6980 Malicious code in vso-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb422332a19aeef03b4767503a00b97068dcb0b6f6119143f0060dae741b750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

postgresql: memory disclosure in certain queries

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...

Nginx Plus R1 < R15-P2 / R16 < R16-P1 Multiple Vulnerabilities

According to its self reported version, the installed version of Nginx Plus is R1 built on Open Source version 1.5.3-1 prior to R15-P2 or R16 built on Open Source version 1.15.2 prior to R16-P1. It is, therefore, affected by the following issues : - An unspecified error exists related to the modu...

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads the held lock is not released correctly which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

...

CVE-2022-31623

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...

MariaDB 安全漏洞

MariaDB is the database management system of the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine. a denial of service vulnerability exists in versions of MariaDB Server prior to 10.7, which originates in extra/mariabackup/dscompress.cc, and can be exploited...

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

Celery local privilege escalation vulnerability

Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryddetach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2022-24769)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability found in containerd where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to...

CVE-2022-24070

A use-after-free vulnerability was found in Subversion in the moddavsvn Apache HTTP server HTTPd module. While looking up path-based authorization authz rules, multiple calls to the postconfig hook can invalidate cached pointers to object-pools, which Subversion subsequently uses. This issue...

CVE-2022-26494

An XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1. JavaScript code must be used in a worker name before a Generate CSR request. Only an administrator can update a worker name...