CVE-2024-6834 Imperative Local Command Injection allows Activity Masking

A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by Zowe's client certificate. This allows access to a user to the endpoints requiring an internal client certificate without any credentials. It could lead to managing components in...

kernel: TIPC message reassembly use-after-free remote code execution vulnerability

A use-after-free UAF flaw exists in the Linux Kernel within the reassembly of fragmented TIPC messages, specifically in the tipcbufappend function. The issue results due to a lack of checks in the error handling cleanup and can trigger a UAF on "struct skbuff", which may lead to remote code...

UBUNTU-CVE-2022-48857

In the Linux kernel, the following vulnerability has been resolved: NFC: port100: fix use-after-free in port100sendcomplete Syzbot reported UAF in port100sendcomplete. The root case is in missing usbkillurb calls on error handling path of -probe function. port100sendcomplete accesses devm allocat...

Malicious code in toolbox-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08eb63c88d757784c7886fd9e365d836ff111c5c27741eef78fed201a5e485e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zonduutest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd104d918d42d9fb61de1d1e24a2c632f2bf39f504ee6c16322e55ca3c977b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7744 Malicious code in health-and-wellness-collab-macro-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 490467d98a5f3dcce3605ce769912fad8036917a2da1ab4065e039e6a970a34b The OpenSSF Package Analysis project identified 'health-and-wellness-collab-macro-deploy' @ 1.0.8 npm as malicious. It is considered malicious...

Malicious code in health-and-wellness-collab-macro-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 490467d98a5f3dcce3605ce769912fad8036917a2da1ab4065e039e6a970a34b The OpenSSF Package Analysis project identified 'health-and-wellness-collab-macro-deploy' @ 1.0.8 npm as malicious. It is considered malicious...

kernel: TIPC message reassembly use-after-free remote code execution vulnerability

A use-after-free UAF flaw exists in the Linux Kernel within the reassembly of fragmented TIPC messages, specifically in the tipcbufappend function. The issue results due to a lack of checks in the error handling cleanup and can trigger a UAF on "struct skbuff", which may lead to remote code...

kernel: TIPC message reassembly use-after-free remote code execution vulnerability

A use-after-free UAF flaw exists in the Linux Kernel within the reassembly of fragmented TIPC messages, specifically in the tipcbufappend function. The issue results due to a lack of checks in the error handling cleanup and can trigger a UAF on "struct skbuff", which may lead to remote code...

The vulnerability of the Docker Desktop platform for developing and delivering container applications lies in the insufficient restrictions on communication channels between endpoints. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Docker Desktop platform for developing and delivering container applications stems from insufficient restrictions on communication channels between specified endpoints. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

MAL-2024-7737 Malicious code in lykooss_poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ba3a00276cdb801eafba21620fd8bb30298090ac3c341a63455934994d7c6bb The OpenSSF Package Analysis project identified 'lykoosspoc' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

VMware vSphere 5.5 - Communication Issue from Studio Console

Hosting a VMware vSphere 5.5 server through XenDesktop or XenApp Studio displays the following error:...

Error: XDDS:F26A2921 Studio Cannot Contact DDC

After a failed upgrade for StoreFront 2.5 and while repairing StoreFront, Studio lost communication to the DDC. Details Error Id: XDDS:F26A2921 Exception: Citrix.Console.Common.CitrixAggregateException One or more parallel operations failed at Citrix.Console.Common.CitrixParallel.InternalForEachT...

Error: "Cannot verify database connectivity" on StoreFront

Though StoreFront server is able to communicate to the SQL server over TCP port 1433, when you click Test Connection at the Deploy Multiple Server Group setup Window for StoreFront 1.1, the connection fails with the following message: Cannot verify database connectivity. The connection string...

LDAP Communication Error on XenMobile Device Manager

The following LDAP communication error appears on XenMobile Device Manager: javax.naming.CommunicationException: simple bind failed: xxxx-xxx-xxx.xxx.xxx.com:666Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed:...

MAL-2024-7735 Malicious code in test_lykos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5fddd535f0f7f7fc3254ce5f34a55dd81109aa9f9bf9705f19676687dd9aa018 The OpenSSF Package Analysis project identified 'testlykos' @ 200.0.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in browserlist-config-usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02d306368aa4feefa13bbaf28e12d66c8517a1f1e0a4f08e72afd9001d2b2cdb The OpenSSF Package Analysis project identified 'browserlist-config-usaa' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

Malicious code in atlassian-plugins-jquery (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa70e76a995c21512e5537f8ba45c8143816593a98f504f5ac88ad3e752d9eaa The OpenSSF Package Analysis project identified 'atlassian-plugins-jquery' @ 0.0.0-dev npm as malicious. It is considered malicious because: - T...

MAL-2024-7728 Malicious code in cx-api-client-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 315d3186e692fd6934de0d66c25255e03eb763a15daa0785e92e58a2abbbba60 The OpenSSF Package Analysis project identified 'cx-api-client-lite' @ 200.0.1 npm as malicious. It is considered malicious because: - The packa...

CVE-2024-39537

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong...