MAL-2024-7966 Malicious code in jiworis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1123aec6d4dbdee29f1bb9f2914d16f0b88719c53d3533bd102bd17153693e6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Denial Of Service (DoS)

REXML is vulnerable to Denial Of Service DoS. The vulnerability is due to a lack of proper entity expansion limits in its XML parsing with SAX2 or pull parser API. The vulnerability allows for excessive resource consumption when handling XML documents with numerous nested or repeated entities...

MAL-2024-7955 Malicious code in fabricexample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4137c5f31f16d594edda141045f7330412108a4d9bc3bb7f4786e8d6e4c09eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7970 Malicious code in litebs64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 464eb08865be218f66f621469eb82604a3a6ad516b41dd52a8232eb595a832be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7940 Malicious code in bs58lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b5203201dce86ff759e5c55007837099f74ef7bd7d925ebf3c4420106f5889 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7994 Malicious code in theme-bahrain-nb-hddd2c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2c4d9f69a68847d94866c5c7615ea8e879f744fe989442fd0e658480480744e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7995 Malicious code in theme-bahrain-nb-hdddc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22b870164e088eff8d02fbc7631e1a1635a1810965e38de6362e8d93dc02434d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the `media_pipeline_explore_next_link()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mediapipelineexplorenextlink function in the drivers/media/mc/mc-entity.c kernel module of the Linux operating system is related to insufficient checking of conditions during graph traversal. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2024-41946

REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...

MAL-2024-7905 Malicious code in @bingads-webui-react/with-site-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997e1cce193e872c031f1482119f4899f32d99a1ecc7dc194270a504607c421e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7904 Malicious code in @bingads-webui-react/primitive-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff052dbe83f6d9ca607174f02e7041d3d73e86c4e7bc0fe7c885c34f3011ab72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Maximo Application Suite uses IBM WebSphere Application Server Liberty - v.24.0.0.4 which is vulnerable to CVE-2024-27268 and CVE-2024-22353.

Summary IBM Maximo Application Suite uses IBM WebSphere Application Server Liberty - v.24.0.0.4 which is vulnerable to CVE-2024-27268 and CVE-2024-22353. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-22353 DESCRIPTION: IBM...

MAL-2024-7888 Malicious code in permenmd-flood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e8f95c3a74116ec48e873d5cb2b154bc8c4a69db48182c6e0555deab176df12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7891 Malicious code in permenmd-wifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2574afbf5c3faac083fdab7db2254f6589a6bd17e6b42868bd5478a6a1397981 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in permenmd-vps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a8748879a494a5092a0ad46e24169aed2ca197307e50d234d71b25dc7b4e1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ALPINE-CVE-2024-41946

REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...

AZL-47376 CVE-2024-41946 affecting package rubygem-rexml for versions less than 3.3.4-1

REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...

AZL-47331 CVE-2024-41946 affecting package ruby for versions less than 3.1.4-7

REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...

DEBIAN-CVE-2024-41946

REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...

AZL-47370 CVE-2024-41946 affecting package ruby for versions less than 3.3.3-2

REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability...