8599 matches found
MAL-2024-10549 Malicious code in aem-core-react-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95d42e3a74bd354e1f4c9ce919082af4d0f85a5bbb6cbd5f32eab262ba83cd6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BELL-CVE-2024-50172
Bulletin has no description...
Vulnerability of components of Linux operating system’s sched/fair kernel, allowing attackers to increase their privileges within the system
The vulnerability of the sched/fair components in the Linux operating system’s kernel is related to errors that occur after deallocation. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...
ROS-20241108-01
A vulnerability in the mac80211 component of the Linux operating system kernel is related to information disclosure in the function stainfofree in net/mac80211/stainfo.c. Exploitation of the vulnerability could allow an attacker to gain access to confidential information A vulnerability in the As...
The vulnerability of the encryption component in Sophos Intercept X software allows a perpetrator to write arbitrary files.
The vulnerability of the encryption component of Sophos Intercept X software is related to the use of unmanaged third-party components. Exploiting this vulnerability could allow a hacker to write arbitrary files...
RHEL 7 : Red Hat Enterprise Linux OpenStack Platform (RHSA-2019:0564)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0564 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH a...
CVE-2024-51751 Arbitrary file read with File and UploadButton components in Gradio
Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as a part of Gradio application to preview file content, an attacker with access to the application might abuse these components to read arbitrary file...
Malicious code in apa-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 361503e28f7ed26889dd3b64e15bd3702d16e1c57dcc009a2cd1e0a7303a85aa The OpenSSF Package Analysis project identified 'apa-components' @ 6.1.3 npm as malicious. It is considered malicious because: - The package...
MAL-2024-10382 Malicious code in apa-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 361503e28f7ed26889dd3b64e15bd3702d16e1c57dcc009a2cd1e0a7303a85aa The OpenSSF Package Analysis project identified 'apa-components' @ 6.1.3 npm as malicious. It is considered malicious because: - The package...
Malicious code in @common-pattern/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22ade4254f9af0310378acce0750c95eaba714619e5cda80c46ca9226d3c2b22 The OpenSSF Package Analysis project identified '@common-pattern/components' @ 8.2.9 npm as malicious. It is considered malicious because: - The...
MAL-2024-10379 Malicious code in @common-pattern/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22ade4254f9af0310378acce0750c95eaba714619e5cda80c46ca9226d3c2b22 The OpenSSF Package Analysis project identified '@common-pattern/components' @ 8.2.9 npm as malicious. It is considered malicious because: - The...
PT-2024-34887 · Cap-Std +1 · Cap-Std +2
Name of the Vulnerable Software and Affected Versions: cap-std versions prior to 3.4.1 cap-primitives versions prior to 3.4.1 cap-async-std versions prior to 3.4.1 Description: The cap-std project's filesystem sandbox implementation on Windows has a flaw that allows untrusted filesystem paths to...
CVE-2024-51744 vulnerabilities
Vulnerabilities for packages: argo-events, kuma, bank-vaults, kubernetes, minio-operator-fips, kubernetes-dashboard-auth-fips, scorecard, minio-operator, policy-controller-fips, flux-image-reflector-controller, traefik-fips, flux-source-controller, argo-workflows, argo-cd, chainctl,...
MAL-2024-10273 Malicious code in cms-ti-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7100910eea49836b4baf265c4f34b2964d486d5f305a31fc08cb57bf04ce96d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cms-ti-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7100910eea49836b4baf265c4f34b2964d486d5f305a31fc08cb57bf04ce96d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10272 Malicious code in cms-hpti-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e35f9a2795b7a81d170feae4580fb5fab3f60a4f289259701395afe3031d0996 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cms-hpti-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e35f9a2795b7a81d170feae4580fb5fab3f60a4f289259701395afe3031d0996 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-Q34M-JH98-GWM2 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow-core, airflow, emissary, kubeflow-volumes-web-app, py3-werkzeug, kubeflow-jupyter-web-app, mlflow, superset...
ROS-20241025-02
Vulnerability of usb-audio component of Linux kernel is related to NULL pointer dereferencing in the sndusbsetsampleratev2v3 function in sound/usb/clock.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the target component of the target...
