CVE-2024-39537 Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong...

CVE-2024-39537

CVE-2024-39537 affects Juniper Networks Junos OS Evolved on the ACX 7000 Series. Root cause: initialization error allows processes that should be internal to be reachable over the network via open ports, enabling an unauthenticated, network-based attacker to cause limited information disclosure a...

MAL-2024-7747 Malicious code in @mariott/mi-headless-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 052067d97e0b49250cecab16aa79fa0a7dec5cb225d908a93dc9db97fb2f74d1 The OpenSSF Package Analysis project identified '@mariott/mi-headless-utils' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

HMS Industrial Networks Anybus-CompactCom 30

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: HMS Industrial Networks Equipment: Anybus-CompactCom 30 Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a...

MAL-2024-7693 Malicious code in sap-attribute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a5de89e4dd90b8b85bea5f4512df328d5a6a7c1aea2f79b4f8d3307e2328af8 The OpenSSF Package Analysis project identified 'sap-attribute' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-categories (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8915969d8530822c50077e17c288da7a30eed3ba1ea7f59b925794f7057b9705 The OpenSSF Package Analysis project identified 'sap-categories' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7687 Malicious code in sap-cardtype (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a79fef21427f6ae3691dc579221cc5e646ba19058b83807d48f46c89d09d0010 The OpenSSF Package Analysis project identified 'sap-cardtype' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7674 Malicious code in sap-ans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 039a7fc0556d340f2ad4abfec6c8573743803edbe7e104947364c0332716d7c5 The OpenSSF Package Analysis project identified 'sap-ans' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7680 Malicious code in sap-bigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49ce1a4e6530cdac3d952e9fcaac5dff16e940cb79d6c1e0f5216c3aad04613d The OpenSSF Package Analysis project identified 'sap-bigger' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-bookmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 006cf595c27f1836eda2b7310fe4ccb2d335997b79d431786210d980a379dde2 The OpenSSF Package Analysis project identified 'sap-bookmark' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-23485

Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation CWE-1304 in the Controller 6000 and 7000 can lead to secured door locks connected via Aperio Communication Hubs to momentarily allow free access. This issue affects: Gallagher Controller 6000 and...

Malicious code in sap-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 939b1cf364289814b2082a4f38e527017bd2981b69b037b790ac750d8056fc4d The OpenSSF Package Analysis project identified 'sap-calendar' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7689 Malicious code in sap-cats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 01665862aab373cb3718450061593c791128c0165f161a7105a72e3808845186 The OpenSSF Package Analysis project identified 'sap-cats' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-audiobitrates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a562c3515e1c83b0487a98af34b44a3adaae6743b3d18bc8de7eebd31e0537bb The OpenSSF Package Analysis project identified 'sap-audiobitrates' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7677 Malicious code in sap-audiobitrates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a562c3515e1c83b0487a98af34b44a3adaae6743b3d18bc8de7eebd31e0537bb The OpenSSF Package Analysis project identified 'sap-audiobitrates' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7644 Malicious code in sap-authitem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6bddbe556bea51802eadeaf835c5a115dc0c681418d7a5a3fce19689b32aa2a The OpenSSF Package Analysis project identified 'sap-authitem' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7636 Malicious code in sap-amt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac0b22abb922cfcbd678374792b3ced84f89c8a2718bf13159ecb5c147213259 The OpenSSF Package Analysis project identified 'sap-amt' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in sap-amt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac0b22abb922cfcbd678374792b3ced84f89c8a2718bf13159ecb5c147213259 The OpenSSF Package Analysis project identified 'sap-amt' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in sap-catid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6d3834e4e12e72ea50ac969f79d3d2f0da45963b6d7304854a8479830cd067d The OpenSSF Package Analysis project identified 'sap-catid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7653 Malicious code in sap-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0b91bc0b188eccdbfa45b832c2b83829cf849c65f51d2c5cb8c9896a210cb5e The OpenSSF Package Analysis project identified 'sap-callback' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...