AVEVA Software, LLC. Security Vulnerabilities

Malicious code in globalize-bundle (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (514144b6db19f7c434988c7e68adbaa8e4ef05c13fa33bfb9c838210a7442e5f) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependences (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (01937c3da9bea8e85a1f2b11953989f03d30855db63d1feaca17c660227a83c5) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in virtuoso-web-chat (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (09f5be1f1f3cad8c43378afb0ddb0aed39e00e1e3169ff5e1559ab4c39d1bf06) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cobrowse-visitor (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (cfe866d98bd76a71b60029f68eefcd3158b2870ec3cf49a37fda9efa17fd05bd) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xfinity-web (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (56b70e09dfa991a04792438328717b5904e3250501889b394aaef6f02bd5890a) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linktr.ee (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (99705723baa67b6d8e8af0802429709ea34477b6fc4e6e5d676244e7a042375c) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-fitness-nextjs (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (91475bd31ece187525402450c7faff2552b2105c4f71c48120d1588d38de2e25) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in idgit-conventional-commitsentity-obj-proxy (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (e21720cf9a4946dccc8cfaf2aeecb605fa378ec130a4c251054a6867ebd163ff) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lupintestingsomethingnewonnpmagain (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (0758fbab81fbdc4aaf14e3f3a1541795fd58e89824393afdb9ec377b493f2c8f) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-mithril-packages (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (e5fee5d58e7e1464614f1aa017521ae6613da70897bbbc6ee11360593f419eca) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in recurrence-formatter (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (970492e695237c754d7801c30cdab26ae4402dd14fe49a15fbe5a009641021e8) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apnic-ui (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (a1754bbb2103752ba95bc70121a835e6e84cccad0943712386bbb399e5e6761d) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in il-shopify-osm-types (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (59867423ea3b374a7842d8ca92f05a9b685f8c826bc45939ba1af80f2d088661) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usamaturk1 (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (e085b7e1bf5f066d6026022820b7b037a92d4bd22cac93050d8657882b7a9e10) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elitebots-prevnames (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (3421b5fe5476f1e1cae544e279bf1731be45c2e887956ef9dca25d2a96dfb9e2) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-39375

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Users may be able to create a public RSS feed to inject malicious code in dashboards of other users....

Cisco IOS Software Internet Key Exchange Version 1 Fragmentation DoS (cisco-sa-ikev1-NO2ccFWz)

According to its self-reported version, Cisco IOS is affected by multiple vulnerabilities. A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting in an affected...

Silverstripe History XSS Vulnerability

A cross-site scripting vulnerability has been discovered in the CMS page history tab. This vulnerability can only be exploited if a user with CMS access has posted malicious or unescaped HTML into any of the text fields on a page, and if the "compare mode" option is selected. The HTML will be...

CVE-2024-28880

Path traversal vulnerability in MosP kintai kanri V4.6.6 and earlier allows a remote attacker who can log in to the product to obtain sensitive information of the...

Intel Dynamic Tuning Technology Software Privilege Escalation (INTEL-SA-00984)

Improper access control in the Intel DTT Software before version 8.7.10802.26924 may allow an authenticated user to potentially enable escalation of privilege via local access. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

CVE-2023-25820

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise version of the file server software. In Nextcloud Server versions 25.0.x prior to 25.0.5 and versions 24.0.x prior to 24.0.10 as well as Nextcloud...

Malicious code in teleport-app-example-node (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (4554cad7be69cbff28d6e2e4d3535b5d7b4158f2efa1c79eaaf705151ec686ff) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sid-client-manager (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (271bfa6075e1282de1c0d5269d79377fe6b16e9d60fa41a2a6a070cb97795905) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in liquity (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (6e4b0656498122960a3dfed802920c3ae8d545955f077fb818b5f9995a5964e9) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nylas-sync (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (2deede55e9c84cfc6a261b2de7de468c49dd03fe6cdee3eda009eeaa0cdb0a73) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-bottt (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (8d1455d70483781388da15d3fb31b7905f74de5677c1158fa76039f8e412b2de) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in by-dynamic-domain (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (4c793f13f0128e865eaa4b39e8ccadf06126154f88e34537d0b31845a5b5f638) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in diil-selfservice-components (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (be3632254a6cd21edaffb63ace342ea00667ca30b7c8f9d01f929d76932adfb9) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lwc-jest-serializer (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (c88fb0df21e3f633176d1aa6411b5fa4bb5175518fe00ea39ededf35bf8823de) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in automation.samples (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (0a774b4130cbf36652fae63dee86aee2c0c60eeb25dd5be05dbe22c5a2dc1eab) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in docusaurus-plugin-matamoh (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (2587fce317c90b4371750f6dc2bd4c7d9ea86770d868b63eabf68afc96029c02) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airslate-controls (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (690f6f02456c41eb2e6abf2b8e2cac6a1480ef7107c64b0da3243848e4767365) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/pp-profile-widget (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (1620f673435e4da925d2327f2d50d0ab0b66532cdb1d19d87accae90da85ac3a) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/capital (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (0edefc32682a93278a1161ed28b71422f389e6192c800c17cd48030832f50e12) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/account-settings (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (b17c84d8882d13329dffcb79f072da64a52b32b63fb3e8ba5a30daaec4e69a57) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fiji-core-pal (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (b28ba0a33259d58a30bc38f6d3444c0677f33e3eda42538f3a1114a9191e7ce0) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @brand_apps/easystart (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (2c717d46d6be03f627a5dd22496e0e0f20d6c159f0bf51e222789857061b0397) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pwa-mmt-ui-header (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (7a752c87394f41444cf0494326a20b2696b4a57ec5250e29fd0bbac426c47680) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tangoch/add-two (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (db14ce679d7f0dd262266021768200a695a57df3a2609fb5b98bd03ebca95d3b) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ozon-ob-foundation/communication (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (fbd79919619acaea0f1d0de932d737a71b7ac5c27049e11483522540d39daed7) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ozon-ob-foundation/event-bus (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (c5d1a30ed3380955e93d6ee25ac05fd6a61c06bc20d670f0fd01e6a4565c82e4) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue2-amis-custom-widget-k (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (7995bc4ce2d3fd487e75baadf8d21d894607e1f79d0142c3aed2ed6c5bf88136) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in salesforce-service-cloud (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (7a05b3238ddc7598095d1b1e72033916f8575b91475f84952ed92ffac09441d9) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-color-utils (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (7f6bb2420bb3dd90627f3e58d133384bba145d7e9d866765cafc6c126aca6485) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webrtc-studio-connection (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (98484a8fd7a5e95581581f13b6c73df8af62c493a521f16719261bcee5472ed7) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ether-sdk (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (8c0daa6287f78623d9fd9d2bd501403142d5196ad67ff5eb49c867d9dea7504a) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lockself (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (763cacc0b344181f12ca9b91d4dc48926ded58e96d01fdfdb14acf86dfaaca4e) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/inventory (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (d6262bbe576936f351b23ae859a7a6109329ac53866ece0189c1a9feee444159) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scoot-layout-components (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (a09230af6397fced3ca15612fad365e70e995e8a83c26af0004b8e1fd8000e02) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beta-fhr (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (1b5c0dc188d59df05adaa6353780fdb2560fa0139c1aa05805c448337dc604a6) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...