Malicious code in react-pro-components-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a506553d493492c9666be45b4f75b99c3f0a1df10d1c0f3d7296cca695b29787 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10978 Malicious code in icf-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8361b152fc7c673dc95e4055a36459ced57bfc88a733b5e9543c2dc07914156a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in icf-react-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in icf-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8361b152fc7c673dc95e4055a36459ced57bfc88a733b5e9543c2dc07914156a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Moodle Authentication Bypass

The vulnerability of the virtual learning environment Moodle is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to system components...

Moodle Authentication Bypass

The vulnerability of the virtual learning environment Moodle is related to the absence of an authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to system components...

Moodle Authentication Bypass

The vulnerability of the virtual learning environment Moodle is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to system components...

gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-27134 via mlflow (1.4.0)

mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-27134 Source advisory: OSV:GHSA-QPGC-W4MG-6V92...

gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-27134 via mlflow (1.4.0)

mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-27134 Source advisory: OSV:PYSEC-2024-224...

Linux DRM/bridge DoS

The vulnerability of the DRM/bridge components of the Linux operating system’s kernel is related to the assignment of the NULL pointer in the function lt8912bridgedetach. Exploiting this vulnerability can allow a hacker to cause a service failure...

MAL-2024-10879 Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

Authentication Bypass

org.apache.tomcat, tomcat-catalina is vulnerable to Authentication Bypass. The vulnerability exists due to improper exception handling in custom Jakarta Authentication ServerAuthContext components, allowing attackers to bypass authentication and gain unauthorized access...

PCI/PM Linux Kernel DoS

The vulnerability of the PCI/PM components in the Linux operating system’s kernel is related to improper error handling in the function pcideviceremove. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DRM AST DoS

The vulnerability of DRM/ast components in Linux operating systems is related to improper locking of resources in the astdpsetonoff function. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Linux kernel DoS

The vulnerability of the accel/ivpu components in the Linux operating system’s kernel is related to improper locking of resources in the ivpudevinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has released a new version which addresses the vulnerabilities. Vulnerability Details CVEID:CVE-2024-45296 DESCRIPTION: pillarjs Path-to-RegExp is vulnerable...

Linux kernel s390/dasd DoS

The vulnerability of the s390/dasd components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE-SU-2024:4036-1 Security update for httpcomponents-client, httpcomponents-core

This update for httpcomponents-client, httpcomponents-core fixes the following issues: httpcomponents-client: - Update to version 4.5.14 HTTPCLIENT-2206: Corrected resource de-allocation by fluent response objects. HTTPCLIENT-2174: URIBuilder to return a new empty list instead of unmodifiable...

Linux DRM AMD Display Kernel DoS

The vulnerability of components related to DRM, AMD, and display in the Linux operating system is associated with a memory corruption in the dpdscclockenread function. Exploiting this vulnerability can allow an attacker to cause a service failure...