CVE-2024-32758

Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange...

CVE-2024-32758 exacqVision - Key exchanges

Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange...

CVE-2024-32758

CVE-2024-32758 affects Johnson Controls exacqVision client/server communications, where under certain conditions the key exchange uses insufficient length. Affected: exacqVision Client and Server (all versions). Root cause: inadequate encryption strength leading to potential decryption of traffic...

CLSA-2024-1722512538 Fix of 10 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-25744 - x86/sev: Rename memencrypt.c to memencryptamd.c - x86: Introduce ia32enabled - x86/coco: Disable 32-bit emulation by default on TDX and SEV CVE-url: https://ubuntu.com/security/CVE-2024-36016 - tty: ngsm: fix frame reception handling - tty:...

MAL-2024-7870 Malicious code in persona-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32b489c0a0bbd44ab1697c3d0492595441e65b30a71a26af76a7dce54fb3d706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PUB-A-323926303

Bulletin has no description...

MAL-2024-7858 Malicious code in kekepaketti-git (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe3fe591280b7e540d3769aca60a5a18013d4081d1fc8006f5416636354c0097 The OpenSSF Package Analysis project identified 'kekepaketti-git' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-41262

mmudb v1.9.3 was discovered to use the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText functions, possibly allowing attackers to intercept communications via a man-in-the-middle attack...

Malicious code in psh-hydra-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e602e73e004aedbd93e2617bee443de236f268346b5b57bd42fcd32669825fd The OpenSSF Package Analysis project identified 'psh-hydra-sdk' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an inconsistency between the data length and count during a write operation in the nfc/nci module, where...

Malicious code in depe-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf5272e13c97b298b088b9e4b50c2900d47ecda4bdb7beccb868c397a7c2ec2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7834 Malicious code in melio-platform-api-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa The OpenSSF Package Analysis project identified 'melio-platform-api-client' @ 5.0.0 rubygems as malicious. It is considered malicious because: -...

Malicious code in symphony-familiarity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eff03dd28a4225440b053e0619ca9619d5c18fbd90e59b8513587d836b4df052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7826 Malicious code in nvk-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0570e31c6c015817cd5fce4308786f1fe2264b4c8bb64fab755b0df9ba0c9f7 The OpenSSF Package Analysis project identified 'nvk-tools' @ 1.2.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7818 Malicious code in ent-widget-ssn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d56160353925d7d4c18c2e8cc517fa031138c0b57634f16503d9db72ccbb6087 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-ssn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d56160353925d7d4c18c2e8cc517fa031138c0b57634f16503d9db72ccbb6087 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 737879d1d600ff1a2162645b8e3951f8f7f8f9c3494b052c5f28eef84339f1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7816 Malicious code in ent-widget-military (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbdebed9b78571c779a871a94b08827dce4891379340dbcdcac9864d33d6435d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7817 Malicious code in ent-widget-occupation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ea664a8546797ec435ec8725f1fce33acd75fc620565baa7327765abaf9ea08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-occupation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ea664a8546797ec435ec8725f1fce33acd75fc620565baa7327765abaf9ea08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...