Malicious code in eslint-plugin-mark-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3454a8e6853853d2148cad33c350ce65ee8d66082f3b5f9f85c6fa8d2936d6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10660 Malicious code in eslint-plugin-mark-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3454a8e6853853d2148cad33c350ce65ee8d66082f3b5f9f85c6fa8d2936d6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Schneider Electric多款产品 资源管理错误漏洞

The Schneider Electric PowerLogic PM5320, among others, is a power and energy meter from Schneider Electric France. A resource management error vulnerability exists in various Schneider Electric products that stems from the presence of uncontrolled resource consumption, which could result in an...

Siemens SIMATIC CP 1543-1 Authorization Error Vulnerability

SIMATIC CP 1543-1 communication processors connect SIMATIC S7-1500 controllers to Ethernet networks. They provide integrated security features such as firewalls, virtual private networks VPNs, and support other protocols with data encryption. An authorization error vulnerability exists in the...

Malicious code in eslint-plugin-cognitive-complexity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a22d9cacdbec9aeec6abcf59091621abc9b7b7a01842cc8aa6b86418c062417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: net/iucv: fix use after free in iucv_sock_close()

A possible use-after-free vulnerability was found in the Linux kernel in iucvsockclose. This issue may lead to a crash or memory corruption...

kernel: vmci: prevent speculation leaks by sanitizing event in event_deliver()

A vulnerability was found in the eventdeliver function in the Linux kernel's VMCI component, where the issue involves a lack of sanitization for the eventdata.event index controlled by user-space, which could lead to speculative information leaks...

kernel: ipc: fix memory leak in init_mqueue_fs()

In the Linux kernel, the following vulnerability has been resolved: ipc: fix memory leak in initmqueuefs When setupmqsysctls failed in initmqueuefs, mqueueinodecachep is not released. In order to fix this issue, the release path is reordered...

MAL-2024-10602 Malicious code in vis-trees (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ebeaeff0143b51c900c7ccf5b61f993cc2667850f6cd3847fc3d3c00e80b952 The OpenSSF Package Analysis project identified 'vis-trees' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in vis-trees (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ebeaeff0143b51c900c7ccf5b61f993cc2667850f6cd3847fc3d3c00e80b952 The OpenSSF Package Analysis project identified 'vis-trees' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

tipc: guard against string buffer overrun

...

MAL-2024-10577 Malicious code in @devlovedz/react-native-camera-kit-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 724956d5e6ddbc30c35608c68d7472fa0048ac56d9b14ce49222f18a4287d39f The OpenSSF Package Analysis project identified '@devlovedz/react-native-camera-kit-example' @ 0.1.0 npm as malicious. It is considered maliciou...

SUSE CVE-2019-12984

A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service...

Malicious code in eslint-config-finance-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e725f78fcf3a683c99f793d4f5e9b51d1d8f7a447baa713cab5c5efd8928f6e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52288 RMAC revert to the beginning of the session in libosdp

libosdp is an implementation of IEC 60839-11-5 OSDP Open Supervised Device Protocol and provides a C library with support for C++, Rust and Python3. In affected versions an unexpected REPLYCCRYPT or REPLYRMACI may be introduced into an active stream when they should not be. Once RMACI message can...

CVE-2024-52288 RMAC revert to the beginning of the session in libosdp

libosdp is an implementation of IEC 60839-11-5 OSDP Open Supervised Device Protocol and provides a C library with support for C++, Rust and Python3. In affected versions an unexpected REPLYCCRYPT or REPLYRMACI may be introduced into an active stream when they should not be. Once RMACI message can...

Malicious code in modlog-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3bc2d1d981039b25af543c99dcd5081c70b24b7ee9c3eb7d68b3c96003bd4a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10545 Malicious code in refocus-sgt-trust1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a58d6e895c9c66ecf3d14b36826200aba02fdf96987b6b7b619c6945dddbfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10554 Malicious code in bdc-materials (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d108cafc0d7325ba2087b67333527f3ac25c28fb5eae98206051d6777be29f6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in refocus-real-time (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45da1f201ce53b0693ee1d8b969dfdcccc0ee919a86acf9efb6583538c7f6c47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...