14320 matches found
Security Bulletin: Vulnerability in Apache Solr affect IBM Operations Analytics - Log Analysis (CVE-2018-18928)
Summary Apache Solr is vulnerable to integer overflow. This has been addressed. Vulnerability Details CVEID:CVE-2018-18928 DESCRIPTION: International Components for Unicode ICU is vulnerable to a denial of service, caused by an integer overflow in the...
Security Bulletin: Vulnerabilities in Logstash affect IBM Operations Analytics - Log Analysis (CVE-2022-29181, CVE-2022-23476)
Summary There are multple nokogiri vulnerabilities in Logstash that effect IBM Operations Analytics - Log Analysis. These have been addressed. Vulnerability Details CVEID:CVE-2022-29181 DESCRIPTION: Nokogiri is vulnerable to a denial of service, caused by improper handling of unexpected data type...
Rockwell Automation ThinManager
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Rockwell Automation Equipment: ThinManager Vulnerability: Externally Controlled Reference to a Resource in Another Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability could...
Rockwell Automation 5015-U8IHFT
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: 5015-U8IHFT Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service...
[SECURITY] Fedora 39 Update: wireshark-4.0.17-1.fc39
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...
CVE-2024-38046
creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review...
CVE-2024-38234
creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review...
CVE-2024-38254
creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review...
How to Detect Suspicious API Traffic
...
Malicious code in priv-pack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis baeb04b7baba552327c5781a2a0bde2c82381f0d43ed7c4d84c48eb0b7c22fa7 The OpenSSF Package Analysis project identified 'priv-pack' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in roblox-badges (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 631332631f47abd7acead3d283e6d06c693fe8e56c3f235bb0855b8fce3fe8a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8853 Malicious code in roblox-event-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f08f30c6d48fad2d39e96f192eb0efb0ae97511a98d6ef6b3048b20486f7c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8850 Malicious code in azure-iothub-service-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39be68a1794d85382ecb02d31e4d56c310788c3eb8f0f552d464410ec90138a5 The OpenSSF Package Analysis project identified 'azure-iothub-service-client' @ 0.0.2 npm as malicious. It is considered malicious because: - Th...
Exploit for Missing Authorization in Sonaar Mp3_Audio_Player_For_Music\,_Radio_\&_Podcast
CVE-2024-7856 ā CVE-2024-7856 Arbitrary File deletion PoC ā ...
MAL-2024-8848 Malicious code in balvant-chavda (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2a4352948540614eef450d227df439f2f1c0d1da030df382e59831548767f473 The OpenSSF Package Analysis project identified 'balvant-chavda' @ 1.8.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-10225 Malicious code in mobileye-8-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7b3a006f16102113625364a266a513016fe138d66a4008fc548e6df97c1a9a8 The OpenSSF Package Analysis project identified 'mobileye-8-connect' @ 7.7.8 npm as malicious. It is considered malicious because: - The package...
MAL-2024-10226 Malicious code in ori-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b71bf5ca700406e224508f08266da2a443693d48eb216c3854de6be0d1451346 The OpenSSF Package Analysis project identified 'ori-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package executes o...
Malicious code in ori-gabriel-test2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97118bb098b3b51630483b77d70977a582c54e3768ff5c54a65435870b3840de The OpenSSF Package Analysis project identified 'ori-gabriel-test2' @ 7.7.9 npm as malicious. It is considered malicious because: - The package...
MAL-2024-8835 Malicious code in skibo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2926d03211dc44468a65561ad4c8faa1e35ea81bbff5dcfb9bd4a918bd603384 The OpenSSF Package Analysis project identified 'skibo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...
Malicious code in iojds (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c829100704731a4406f783062c0ccf13e42c91dcf3284731aa1d272a93fe8d0f The OpenSSF Package Analysis project identified 'iojds' @ 9.0.0 npm as malicious. It is considered malicious because: - The package communicates...