gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-27133 via mlflow (1.4.0)

mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-27133 Source advisory: OSV:PYSEC-2024-241...

gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-27132 via mlflow (1.4.0)

mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-27132 Source advisory: OSV:PYSEC-2024-240...

GHSA-CCGV-VJ62-XF9H Spring Web vulnerable to Open Redirect or Server Side Request Forgery

Applications that use UriComponentsBuilder to parse an externally provided URL e.g. through a query parameter AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect attack or to a SSRF attack if the URL is used after passing validation checks...

UBUNTU-CVE-2024-22243

Applications that use UriComponentsBuilder to parse an externally provided URL e.g. through a query parameter AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is...

TinyTurla-NG in-depth tooling and command and control analysis

Cisco Talos, in cooperation with CERT.NGO, has discovered new malicious components used by the Turla APT. New findings from Talos illustrate the inner workings of the command and control C2 scripts deployed on the compromised WordPress servers utilized in the compromise we previously disclosed...

MAL-2024-1033 Malicious code in xo-page-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a11329bbae977cd57e3d9e774105ce918aef5ff74bfec87f9c470dba87bed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-page-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a11329bbae977cd57e3d9e774105ce918aef5ff74bfec87f9c470dba87bed1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Multiple Siemens Products Null Pointer Dereference Vulnerability

SIMATIC PCS 7 is a centralized control system DCS that integrates components such as SIMATIC WinCC, SIMATIC Batch, SIMATIC Route control, OpenPCS 7, etc. SIMATIC WinCC is a Supervisory Control and Data Acquisition SCADA system.SIMATIC WinCC Runtime Professional is a visual runtime platform for...

CVE-2024-21725 [20240204] - Core - XSS in mail address outputs

Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components...

CVE-2024-21726 [20240205] - Core - Inadequate content filtering within the filter code

Inadequate content filtering leads to XSS vulnerabilities in various components...

CVE-2024-21726

The Joomla! Content Management System (CMS) is affected by CVE-2024-21726 , a vulnerability where inadequate content filtering within the framework's filter code allows for Cross-Site Scripting (XSS) in various components. Researchers have indicated that attackers could potentially achieve remote...

mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Moderate: Red Hat Security Advisory: mysql:8.0 security update

An update for the mysql:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Malware in analysis-studio-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in analysis-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1020 Malicious code in analysis-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df618b529012f6ffca73476f9c27854370f58223bddbaceb6acb01605d75909 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in analysis-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df618b529012f6ffca73476f9c27854370f58223bddbaceb6acb01605d75909 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1022 Malicious code in analysis-studio-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c17c5e49ccef1b22c2e66b608c7057f54ee1bcf3ab817c89662687dddc6f02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in analysis-studio-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c17c5e49ccef1b22c2e66b608c7057f54ee1bcf3ab817c89662687dddc6f02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...