11045 matches found
Malware in cms-ti-components
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
ROS-20241108-01
A vulnerability in the mac80211 component of the Linux operating system kernel is related to information disclosure in the function stainfofree in net/mac80211/stainfo.c. Exploitation of the vulnerability could allow an attacker to gain access to confidential information A vulnerability in the As...
Linux sched/fair Privilege Escalation
The vulnerability of the sched/fair components in the Linux operating system’s kernel is related to errors that occur after deallocation. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...
Sophos Intercept X Arbitrary File Write
The vulnerability of the encryption component of Sophos Intercept X software is related to the use of unmanaged third-party components. Exploiting this vulnerability could allow a hacker to write arbitrary files...
RHEL 7 : Red Hat Enterprise Linux OpenStack Platform (RHSA-2019:0564)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0564 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH a...
CVE-2024-51751 Arbitrary file read with File and UploadButton components in Gradio
Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as a part of Gradio application to preview file content, an attacker with access to the application might abuse these components to read arbitrary file...
MAL-2024-10382 Malicious code in apa-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 361503e28f7ed26889dd3b64e15bd3702d16e1c57dcc009a2cd1e0a7303a85aa The OpenSSF Package Analysis project identified 'apa-components' @ 6.1.3 npm as malicious. It is considered malicious because: - The package...
Malicious code in apa-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 361503e28f7ed26889dd3b64e15bd3702d16e1c57dcc009a2cd1e0a7303a85aa The OpenSSF Package Analysis project identified 'apa-components' @ 6.1.3 npm as malicious. It is considered malicious because: - The package...
MAL-2024-10379 Malicious code in @common-pattern/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22ade4254f9af0310378acce0750c95eaba714619e5cda80c46ca9226d3c2b22 The OpenSSF Package Analysis project identified '@common-pattern/components' @ 8.2.9 npm as malicious. It is considered malicious because: - The...
Malicious code in @common-pattern/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22ade4254f9af0310378acce0750c95eaba714619e5cda80c46ca9226d3c2b22 The OpenSSF Package Analysis project identified '@common-pattern/components' @ 8.2.9 npm as malicious. It is considered malicious because: - The...
PT-2024-34887 · Cap-Std +1 · Cap-Std +2
Name of the Vulnerable Software and Affected Versions: cap-std versions prior to 3.4.1 cap-primitives versions prior to 3.4.1 cap-async-std versions prior to 3.4.1 Description: The cap-std project's filesystem sandbox implementation on Windows has a flaw that allows untrusted filesystem paths to...
CVE-2024-51744 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib-fips, azcopy, doppler-kubernetes-operator, promxy-fips, flux-notification-controller-fips, azuredisk-csi-fips, cluster-autoscaler, minio-operator, crossplane-provider-azure-sql, tekton-chains, temporal-server,...
MAL-2024-10273 Malicious code in cms-ti-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7100910eea49836b4baf265c4f34b2964d486d5f305a31fc08cb57bf04ce96d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cms-ti-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7100910eea49836b4baf265c4f34b2964d486d5f305a31fc08cb57bf04ce96d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10272 Malicious code in cms-hpti-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e35f9a2795b7a81d170feae4580fb5fab3f60a4f289259701395afe3031d0996 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cms-hpti-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e35f9a2795b7a81d170feae4580fb5fab3f60a4f289259701395afe3031d0996 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-Q34M-JH98-GWM2 vulnerabilities
Vulnerabilities for packages: airflow, emissary, mlflow, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, py3-werkzeug, airflow-core...
ROS-20241025-02
Vulnerability of usb-audio component of Linux kernel is related to NULL pointer dereferencing in the sndusbsetsampleratev2v3 function in sound/usb/clock.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the target component of the target...
Exploit for Command Injection in Netgate Pfsense
pfSense 2.7.0 Command Injection Exploit CVE-2023-42326 This...
Oracle Hyperion BI+ Unauthorized Access
The vulnerability of the UI and Visualization component of the Oracle Hyperion BI+ service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...