2882 matches found
CVE-2024-40895
FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the...
CVE-2024-40895
The management console FFRI AMC (versions 3.4.0 to 3.5.3), along with certain OEM products by NEC Corporation and Sky Co., Ltd. , is vulnerable to an OS command injection (CWE-78). The flaw is triggered when the notification program setting is enabled and the executable file path is configured to...
PT-2024-29133 · Ffri · Ffri Amc
Name of the Vulnerable Software and Affected Versions: FFRI AMC versions 3.4.0 to 3.5.3 Some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 Description: The issue allows a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an...
MAL-2024-7609 Malicious code in sap-batch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3840087b144e6aecb88e059cf81b246bf66c3406359290349d846a7939202a5 The OpenSSF Package Analysis project identified 'sap-batch' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in sap-batch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3840087b144e6aecb88e059cf81b246bf66c3406359290349d846a7939202a5 The OpenSSF Package Analysis project identified 'sap-batch' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
SUSE CVE-2024-36138
Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via childprocess.spawn / childprocess.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option i...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
PT-2024-4625
Name of the Vulnerable Software and Affected Versions: Node.js versions up to 18.20.3 Node.js versions up to 20.15.0 Node.js versions up to 22.4.0 Description: The issue arises from improper handling of batch files with all possible extensions on Windows via child process.spawn / child...
Malicious code in batch-translations (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6758 Malicious code in batch-translations (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in batch-insert (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6755 Malicious code in batch-actions (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6757 Malicious code in batch-it (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6756 Malicious code in batch-insert (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in batch-actions (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in batch-it (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in api-batch (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in active-scaffold_batch_vho (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-22263
Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user who has access to skipper server api...
Fedora: Security Advisory for tpm2-tools (FEDORA-2024-0c9d3b51d4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...