MAL-2024-956 Malicious code in hub-blockly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a569a2ddf66ac93b021560bb8b3ef62f8c0a81db49d53de3ce5e1648b68de76f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FeverWarn Privilege Escalation

The vulnerabilities of the microprogramming software for thermal scanning systems—FeverWarn ESP32, FeverWarn RaspberryPi, and the centralized data storage and management system FeverWarn DataHub RaspberryPi—are related to deficiencies in access control during the processing of Wi-Fi interfaces...

Important: Red Hat Enhancement Advisory: Release of AWS Load Balancer Operator 1.0.1 on OperatorHub

Release of AWS Load Balancer Operator 1.0.1 Release of OpenShift AWS Load Balancer Operator 1.0.1...

Intel Integrated Sensor Hub Driver Privilege Escalation

The vulnerability of the Intel Integrated Sensor Hub driver for NUC P14E Laptop Element notebooks is related to the default access settings. Exploiting this vulnerability can allow attackers to gain increased privileges...

Arbitrary Code Execution

llama-hub is vulnerable to Arbitrary Code Execution. The vulnerability is due to missing safeload configuration during YAML parsing. An attackers can execute arbitrary code by exploiting this vulnerability...

docsrag (>=0.1.3, <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (0.0.25)

llama-hub PYPI version 0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.3, =0.1.6 Source cves: CVE-2024-23730 Source advisory: GHSA-297X-2QF3-JRJ3...

Unsafe yaml deserialization in llama-hub

The OpenAPI and ChatGPT plugin loaders in LlamaHub aka llama-hub before 0.0.67 allow attackers to execute arbitrary code because safeload is not used for YAML...

docsrag (>=0.1.3, <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (0.0.25)

llama-hub PYPI version 0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.3, =0.1.6 Source cves: CVE-2024-23730 Source advisory: OSV:GHSA-297X-2QF3-JRJ3...

docsrag (>=0.1.3, <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (0.0.25)

llama-hub PYPI version 0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.3, =0.1.6 Source cves: CVE-2024-23730 Source advisory: MEND:CVE-2024-23730...

CVE-2023-29244

Incorrect default permissions in some Intel Integrated Sensor Hub ISH driver for Windows 10 for Intel NUC P14E Laptop Element software installers before version 5.4.1.4479 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29244

Incorrect default permissions in some Intel Integrated Sensor Hub ISH driver for Windows 10 for Intel NUC P14E Laptop Element software installers before version 5.4.1.4479 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29244: Incorrect Default Permissions

Incorrect default permissions in some Intel Integrated Sensor Hub ISH driver for Windows 10 for Intel NUC P14E Laptop Element software installers before version 5.4.1.4479 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that stems from incorrect default permissions in the Integrated Sensor Hub driver. It could allow an authenticated user to potentially enable privilege escalation via local access...

Description of the security update for Visual Studio 2015 Update 3: January 9, 2024 (KB5030979)

None None...

January 9, 2024—KB5034173 (Monthly Rollup)

None None...

PT-2024-1326 · Intel · Intel Integrated Sensor Hub (Ish) Driver +1

Name of the Vulnerable Software and Affected Versions: Intel NUC P14E Laptop Element versions prior to 5.4.1.4479 Description: The issue is related to incorrect default permissions in the Intel Integrated Sensor Hub ISH driver, which may allow an authenticated user to potentially enable escalatio...

Secure Hub error: Unable to install app - integrity could not be verified.

When attempting to install an application using Secure Hub, users may encounter the error message: "Unable to install app. This app cannot be installed because its integrity could not be verified."...

GHSA-86RG-PF4C-5GRG @backstage/backend-app-api leaks GitLab access tokens

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...

@backstage/backend-app-api leaks GitLab access tokens

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...

CVE-2023-6944

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...