PT-2024-10440 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance 10.0.2 Identity Manager Description: The issue is related to the transmission of user credentials in clear text by the Identity Manager component, which could be obtained by an attacker using man-in-the-middle...

The vulnerability of the NFC component in the Linux operating system’s kernel allows a hacker to gain unauthorized access to confidential information within the system.

The vulnerability of the NFC component in the Linux operating system’s kernel involves the parallel use of a shared resource with incorrect synchronization „race condition“. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

MAL-2024-9099 Malicious code in no-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d16e369369da30f01d71c12e98c478655549b6560cec36be98865bd3a594766 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-api-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14532f4785bce55a885a6fd2945c9705ab690e1385adeee16c6d8d2d9420b4b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bolteu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4bd2a7cf68d796d1274d10ce0e343341543e85f964224249a958802918b2482b The OpenSSF Package Analysis project identified 'bolteu' @ 8.2.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-9093 Malicious code in vention-quest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f124711f447cf7ae801872eeb6d59444e520c498e3499e74c0099d2448d5c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9092 Malicious code in hulululu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50cd582df4ddf139ea1ee884391d575059485ee4b4b14852d9b845ab23f53121 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @linx-ui/pharmacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b11f58a8b099193bd554037a57e978c958facba9835da91b672d8bc2155062f1 The OpenSSF Package Analysis project identified '@linx-ui/pharmacy' @ 4.2.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9086 Malicious code in @linx-ui/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a70dd8ec71455f4177650ed33f72b8da1f8067e2afbebd634836da68f44cbc53 The OpenSSF Package Analysis project identified '@linx-ui/shared' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9084 Malicious code in deferred-initialization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e4db661b857c9a0cd462997fc4c4b31ac032777bc902b2e3bd8455dc97bd1f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9083 Malicious code in hotels-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bc89d8c1cd178341947d46f998ed1e1915c4d6d5aa787e8e939b51ed463de409 The OpenSSF Package Analysis project identified 'hotels-widget' @ 99.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9082 Malicious code in should_be_whitelisted.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2bdcbf3b9af97d69ba20e716c6917837abe6b881080b90b816fffb03c9ea288f The OpenSSF Package Analysis project identified 'shouldbewhitelisted.js' @ 10.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-9081 Malicious code in @test3.svt/first-npm-package-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c1c2ce1077d3778b7ed51e8d98f9ba6a9cd57e2be0c134fe9bda021d3a10248b The OpenSSF Package Analysis project identified '@test3.svt/first-npm-package-test' @ 1.0.1 npm as malicious. It is considered malicious because...

MAL-2024-9080 Malicious code in kupo-app-secure-store-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d04ed47c7e296896a93ec11ccbe851b0a3d33f3afe06d2aaba32be6263363a33 The OpenSSF Package Analysis project identified 'kupo-app-secure-store-plugin' @ 99.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in speech-to-speech-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 947b44b1c26d3fdd2e1470d18b34076e52b1506fbadbdf85505632a63e4b6c9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9071 Malicious code in com.lootlocker.lootlockersdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eadafa20871062037f566c91f49770323a50ffaff90581cdab78bdf6cb0b86f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9056 Malicious code in @facetca/facet-mmleditor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3afa70fa6de6ec83d479072d976210414be16f6e5f35019f8aadd2e0c6c4ec91 The OpenSSF Package Analysis project identified '@facetca/facet-mmleditor' @ 3.0.3 npm as malicious. It is considered malicious because: - The...

CVE-2021-44549

A vulnerability was found in Apache Sling Commons Messaging Mailangus-mail, which provides a simple interface for sending emails via SMTPS in OSGi, does not offer an option to enable server identity checks, leaving connections vulnerable to "man-in-the-middle" attacks and can allow insecure email...

MAL-2024-9046 Malicious code in arkose-vue2-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9008418a813522522804dfaf58f73128ae52ca85667b506962284ddbfc3141bf The OpenSSF Package Analysis project identified 'arkose-vue2-example' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

JVN#39280069: RevoWorks Cloud vulnerable to unintended process execution

RevoWorks Cloud provided by J’s Communication Co., Ltd. is software to build a sandbox environment isolated from a client's local environment. In the sandbox environment, the product provides the function enabling execution of web browsers and detection and blocking of unauthorized processes...