Malicious code in @avaldigitallabs/adl-pfm-lib-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ed6f4ad493c3bd3069194fa08ab5dd589b970ecc22219f0b5bf9162b0ecfa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

Microsoft said it is developing security updates to address two loopholes that it said could be abused to stage downgrade attacks against the Windows update architecture and replace current versions of the operating system files with older versions. The vulnerabilities are listed below -...

MAL-2024-7978 Malicious code in onboarding-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf0eeb8331dee0a51811bb425579a846641a464fecc8c6807dc0d270e7048a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in onboarding-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in onboarding-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf0eeb8331dee0a51811bb425579a846641a464fecc8c6807dc0d270e7048a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WooCommerce Multiple Customer Addresses & Shipping Plugin < 24.9 is vulnerable to Multiple Vulnerabilities

Software WooCommerce Multiple Customer Addresses & Shipping Type Plugin Vulnerable versions 24.9 Fixed in 24.9 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Multiple Vulnerabilities CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2a12b42bb04b...

CVE-2024-41811

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

DEBIAN-CVE-2024-41811

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

UBUNTU-CVE-2024-41811

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

CVE-2024-41811 ipl/web susceptible to Cross-Site Request Forgery (CSRF)

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

CVE-2024-41811

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

CVE-2024-41811 ipl/web susceptible to Cross-Site Request Forgery (CSRF)

ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. CSRF. All affected products, in any version, will be unaffected by this once icinga-php-library is upgraded. Version...

CVE-2024-41811

CVE-2024-41811 concerns ipl/web, a set of PHP web components; under certain circumstances, CSRF is possible. The root cause is CSRF suitability in the Icinga-related code paths, with all affected products seemingly mitigated by upgrading icinga-php-library. The fix is included in icinga-php-libra...

Multipath tools

In enterprise environments where uptime and performance are critical, ensuring continuous and efficient access to storage is paramount. Multipathing is a technique used to provide multiple physical paths between the host and the storage devices. XenServer manages these multiple I/O paths, enablin...

August 31, 2016 — KB3176938 (OS Build 14393.105)

August 31, 2016 — KB3176938 OS Build 14393.105 Applies To Windows 10, version 1607, all editions This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Improved reliability of Windows Ink Workspace, Microsoft Edge, Fil...

PT-2024-5341 · Omnivise · Omnivise T3000 Terminal Server +7

Name of the Vulnerable Software and Affected Versions: Omnivise T3000 Application Server R9.2 All versions Omnivise T3000 Domain Controller R9.2 All versions Omnivise T3000 Network Intrusion Detection System NIDS R9.2 All versions Omnivise T3000 Product Data Management PDM R9.2 All versions...

Dell CloudLink security vulnerabilities

Dell CloudLink is a data encryption and key management system from Dell USA. A security vulnerability exists in Dell CloudLink versions prior to 8.1, which arises from improper checking or handling of abnormal conditions in cluster components, and can be exploited by an attacker with remote acces...

March 10, 2020—KB4540705 (OS Build 15063.2313)

March 10, 2020—KB4540705 OS Build 15063.2313 Applies To Windows 10, version 1703, all editions Note Current status of Windows 10, version 1703 Windows 10, version 1703 has reached end of service for all editions. To continue receiving security and quality updates, Microsoft recommends updating to...

MS11-071: Vulnerability in Windows Components could allow remote code execution: September 13, 2011

MS11-071: Vulnerability in Windows Components could allow remote code execution: September 13, 2011 Applies To Windows 7 Service Pack 1 Windows 7 Enterprise Windows 7 Professional Windows 7 Ultimate Windows 7 Home Premium Windows 7 Home Basic Windows 7 Enterprise Windows 7 Professional Windows 7...

MS12-054: Description of the security update for Windows Networking Components: August 14, 2012 (KB2712808)

MS12-054: Description of the security update for Windows Networking Components: August 14, 2012 KB2712808 Applies To Windows 7 Service Pack 1 Windows 7 Enterprise Windows 7 Professional Windows 7 Ultimate Windows 7 Home Premium Windows 7 Home Basic Windows 7 Enterprise Windows 7 Professional...