MAL-2024-7572 Malicious code in sap-assignmentform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08aacf1067cdef362e4c9fc7d8498f96906f4d0c1ca192414050f1e92ff480de The OpenSSF Package Analysis project identified 'sap-assignmentform' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-attempt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a877bf37242b376746403eed64d2af102e172d2c6deba7bd056191f5f595c88 The OpenSSF Package Analysis project identified 'sap-attempt' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-apikey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb8fd3ec31e8b463a6693640ad63d0daa3ec8d6ab786d3c92b8b0b713dddeec6 The OpenSSF Package Analysis project identified 'sap-apikey' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7550 Malicious code in sap-answer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79e44eeafd340f3bbc96c929c1594aa40e955c4c86c21b1d211ef5ad5563f02b The OpenSSF Package Analysis project identified 'sap-answer' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7537 Malicious code in sap-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20cbad827bfae9106b2c0350da02d8061281aa4650eca3a12891a1d44b105205 The OpenSSF Package Analysis project identified 'sap-all' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7545 Malicious code in sap-amount (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8956ea6aded6c1b89426a6ac908c07ef50a95ae0dd32d0a8c4d5be953fe93583 The OpenSSF Package Analysis project identified 'sap-amount' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7536 Malicious code in sap-align (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e87ea42b54a5117ae004dd6efd6f57e7dbfe3019b3398157b6ec336de0b84faa The OpenSSF Package Analysis project identified 'sap-align' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-advanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b44915bb9e2db1c39c412b6eafce4e28d360737be9e0a62b77d95c39f99f4c9e The OpenSSF Package Analysis project identified 'sap-advanced' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7515 Malicious code in sap-adress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37c5e4d5d2c6b439b1cf6346ce37ed432f779ff86d16f2776be39c333f0df902 The OpenSSF Package Analysis project identified 'sap-adress' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7511 Malicious code in sap-address2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9cee0b5eaf1e673a0834af5cc84b8d35484a58574280cb59034efc43ce6c738 The OpenSSF Package Analysis project identified 'sap-address2' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7501 Malicious code in sap-added (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 690c89393c1cd2e1cb373bbeb5814983ffd3c010ffd6a154daf6c46828f46423 The OpenSSF Package Analysis project identified 'sap-added' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7494 Malicious code in sap-activity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e0a5149544b867f2487852926e46eba534638de827b17055beda04b632dbe63 The OpenSSF Package Analysis project identified 'sap-activity' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2024-5874 · Hashicorp +2 · Vault Enterprise +3

Name of the Vulnerable Software and Affected Versions: Vault and Vault Enterprise versions prior to 1.15.12 Vault and Vault Enterprise versions prior to 1.16.6 Vault and Vault Enterprise versions prior to 1.17.2 Description: The issue is related to the improper handling of requests originating fr...

PT-2024-29813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the validation of passed-in drm syncobj handles in the timestamp extension of the Linux kernel's drm/v3d component. If userspace provides an unknown or invalid handle...

MAL-2024-7439 Malicious code in sap-access (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1aa14a85de6a25c0c6ad3c4e767a216f5abbd057f79e6b296168df122fe6d7eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Code Issue Vulnerability in DAR-7000 at AUO Electronic Devices (Shanghai) Co.

DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. AUO Electronic Devices Shanghai Co. A code issue vulnerability exists in the DAR-7000, which stems from the file parameter of /log/decodmail.php being able to deserialize certain content. No details of the vulnerability are...

Malicious code in fake-package-agpl-license (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53470e96107ebc806b1a440821244a335389aca112b5752ce995ae87150b0b4d The OpenSSF Package Analysis project identified 'fake-package-agpl-license' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

RUSTSEC-2024-0442 Dump Undefined Memory by `JitDumpFile`

The unsound function dumpcodeloadrecord uses fromrawparts to directly convert the pointer addr and len into a slice without any validation and that memory block would be dumped. Thus, the 'safe' function dumpcodeloadrecord is actually 'unsafe' since it requires the caller to guarantee that the ad...

SUSE CVE-2024-39478

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations...

DEBIAN-CVE-2024-39482

In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btreeiter btreeiter is used in two ways: either allocated on the stack with a fixed size MAXBSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the...