13398 matches found
Malicious code in fulfillment-portal-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae800e3a06eddead9c751afd78539dde2e601ffb792b69421bbf36d2a6f1d87e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
container-tools:ol8 security update
aardvark-dns buildah 2:1.33.11-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/fe85f0d - Resolves: RHEL-61853 2:1.33.10-1 - update to the latest content of...
CVE-2024-8676
A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that restoration, it attempts to restore the mounts from the restore archive instead of the pod request. As a result, the validations run on the...
RHSA-2024:9991 Red Hat Security Advisory: RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) security update
Bulletin has no description...
RHSA-2024:9990 Red Hat Security Advisory: RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) security update
Bulletin has no description...
CVE-2023-5830
creationtimestamp| type| source ---|---|--- 2024-11-25 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-25 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-24 2025-01-02 00:00:00+00:00| seen| The Shadowserver...
Bootiful Spring Boot 3.4: Spring Boot
And now we’re back where we started: Spring Boot 3.4! This release is what pulls everything together. When you look at Spring Boot, remember that it normalizes the integration of all the projects it assembles and tries, wherever possible, to smooth out whatever integration issues might arise from...
Malicious code in certain-common-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4a6d86cf99227285396bb8d34406295f57bf5c78fe1bf3b54b181ca6908cf93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10894 Malicious code in certain-common-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4a6d86cf99227285396bb8d34406295f57bf5c78fe1bf3b54b181ca6908cf93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Astra Linux – Vulnerability in libcupsfilters
CUPS is a standards-based, open-source printing system. libcupsfilters contains the code for the filters from the former cups-filters package, which serve as library functions for tasks related to data format conversion in Printer Applications. The cfGetPrinterAttributes5 function in libcupsfilte...
OESA-2024-2462 tomcat security update
The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open developmen...
The vulnerability of the scmidebugfs_common_setup() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the scmi.debugfscommonsetup function in the drivers/firmware/armscmi/driver.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Moderate: Red Hat Security Advisory: RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) security update
An update for openstack-tripleo-common and python-tripleoclient is now available for Red Hat OpenStack Platform RHOSP 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
The vulnerability of the mm/slab_common component in the Linux operating system allows a hacker to gain elevated privileges within the system.
The vulnerability of the mm/slabcommon component in the Linux kernel is related to memory management errors after deallocation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...
CVE-2018-9424
creationtimestamp| type| source ---|---|--- 2024-11-20 00:22:02+00:00| seen| https://t.me/cvedetector/11539...
KASDA KW5515 安全漏洞
KASDA KW5515 is a wireless router from KASDA. A security vulnerability exists in KASDA KW5515 v1.7 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary operating system commands via cgi parameters...
Imperva and the Secure by Design Pledge: A Commitment to Cybersecurity Excellence
The Cybersecurity and Infrastructure Security Agency CISA has introduced a voluntary "Secure by Design Pledge" for enterprise software manufacturers, focusing on improving the security of their products and services. This pledge outlines seven key principles, forming the core of a robust...
CVE-2024-50518
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Common Ninja Pricer Ninja pricer-ninja-pricing-tables allows Stored XSS.This issue affects Pricer Ninja: from n/a through = 2.1.0...
CVE-2024-50518
CVE-2024-50518 is a Stored XSS in the WordPress plugin Pricer Ninja (Pricer Ninja: Pricing Tables) versions up to and including 2.1.0. The vulnerability stems from improper neutralization of user input during web page generation, enabling an attacker with Contributor-level access (or higher) to i...