Malicious code in @avaldigitallabs/adl-pfm-lib-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ed6f4ad493c3bd3069194fa08ab5dd589b970ecc22219f0b5bf9162b0ecfa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8012 Malicious code in @avaldigitallabs/adl-pfm-lib-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ed6f4ad493c3bd3069194fa08ab5dd589b970ecc22219f0b5bf9162b0ecfa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

Microsoft said it is developing security updates to address two loopholes that it said could be abused to stage downgrade attacks against the Windows update architecture and replace current versions of the operating system files with older versions. The vulnerabilities are listed below -...

Malicious code in onboarding-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf0eeb8331dee0a51811bb425579a846641a464fecc8c6807dc0d270e7048a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7978 Malicious code in onboarding-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf0eeb8331dee0a51811bb425579a846641a464fecc8c6807dc0d270e7048a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WooCommerce Multiple Customer Addresses & Shipping Plugin < 24.9 is vulnerable to Multiple Vulnerabilities

Software WooCommerce Multiple Customer Addresses & Shipping Type Plugin Vulnerable versions 24.9 Fixed in 24.9 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Multiple Vulnerabilities CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2a12b42bb04b...

CVE-2024-41811

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

DEBIAN-CVE-2024-41811

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

UBUNTU-CVE-2024-41811

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

CVE-2024-41811

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

CVE-2024-41811 ipl/web susceptible to Cross-Site Request Forgery (CSRF)

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

CVE-2024-41811

CVE-2024-41811 concerns ipl/web, a set of PHP web components; under certain circumstances, CSRF is possible. The root cause is CSRF suitability in the Icinga-related code paths, with all affected products seemingly mitigated by upgrading icinga-php-library. The fix is included in icinga-php-libra...

CVE-2024-41811 ipl/web susceptible to Cross-Site Request Forgery (CSRF)

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

Multipath tools

In enterprise environments where uptime and performance are critical, ensuring continuous and efficient access to storage is paramount. Multipathing is a technique used to provide multiple physical paths between the host and the storage devices. XenServer manages these multiple I/O paths, enablin...

Dell CloudLink 安全漏洞

Dell CloudLink is a data encryption and key management system from Dell USA. A security vulnerability exists in Dell CloudLink versions prior to 8.1, which arises from improper checking or handling of abnormal conditions in cluster components, and can be exploited by an attacker with remote acces...

PT-2024-5341 · Omnivise · Omnivise T3000 Terminal Server +7

Name of the Vulnerable Software and Affected Versions: Omnivise T3000 Application Server R9.2 All versions Omnivise T3000 Domain Controller R9.2 All versions Omnivise T3000 Network Intrusion Detection System NIDS R9.2 All versions Omnivise T3000 Product Data Management PDM R9.2 All versions...

GHSA-HX9V-6R9F-W677 Insecure Jinja2 templates rendered in Haystack Components can lead to RCE

Impact Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja2 templates, if anyone can create and render that template on the client machine they run any code. Patches The problem has been fix...

CVE-2024-41950 Insecure Jinja2 templates rendered in Haystack Components can lead to RCE

Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vector search and more. Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja...

MAL-2024-7860 Malicious code in @illimity/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 740bece39d068261516307ed31d745ce0d411396f96f9e57fe0abdec13f0ef8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @illimity/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 740bece39d068261516307ed31d745ce0d411396f96f9e57fe0abdec13f0ef8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...