MAL-2024-4143 Malicious code in Be.Vlaanderеn.Basisregistеrs.DataDog.Tracing.Sql (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaanderеn.Basisrеgіstеrs.DataDog.Tracing.Sql (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4147 Malicious code in Be.Vlaanderеn.Basisrеgіstеrs.DataDog.Tracing.Sql (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaanderеո.Basisrеgisters.DataDоg.Tracing (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4190 Malicious code in Be.Vlaanԁeren.Basisregisters.DаtaDog.Tracing.SqlStreamStorе.Micrоsoft (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4397 Malicious code in Bе.Vlaanderen.Basisrеgisters.DataDog.Tracing.SqlStreamStore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Bе.Vlаanderen.Basisregisters.DataDog.Tracing.Microsoft (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4424 Malicious code in Bе.Vlаanderen.Basisregisters.DataDog.Tracing.Microsoft (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2328 Malicious code in eslint-plugin-datadog (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-plugin-datadog (npm)

--- -= Per source details. Do not edit below this line.=-...

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...

CVE-2024-37891 vulnerabilities

Vulnerabilities for packages: request-1276, py3.13-scanner-test-libraries, superset, py3-urllib3, reflex, py3-pipenv, kubeflow-pipelines, k8s-sidecar, az, barman, nemo, checkov, kubeflow-katib, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, py3-cassandra-medusa,...

GHSA-87M9-RV8P-RGMG vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, opentelemetry-collector-fips, spicedb...

CVE-2024-36129 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-fips, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, opentelemetry-collector...

GHSA-C74F-6MFW-MM4V vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-fips, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, opentelemetry-collector...

GHSA-V9HF-5J83-6XPP vulnerabilities

Vulnerabilities for packages: py3-pymysql...

CVE-2024-36039 vulnerabilities

Vulnerabilities for packages: py3-pymysql...

CVE-2024-35195 vulnerabilities

Vulnerabilities for packages: request-1276, superset, reflex, py3-pipenv, kubeflow-pipelines, k8s-sidecar, az, checkov, kubeflow-katib, apache-beam-python-3.11-sdk, patroni, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, py3-cassandra-medusa, confluent-docker-utils, jwt-tool,...

Security Bypass

datadog/dd-trace is vulnerable to Security Bypass. The vulnerability is due to insufficient constraint on the ddtrace.requestinithook by the openbasedir INI directive, which allows an attacker to bypass the openbasedir INI directive...

GitLab 13.7 < 14.0.9 / 14.1 < 14.1.4 / 14.2 < 14.2.2 (CVE-2021-22260)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions...