MAL-2024-11238 Malicious code in less-rhino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e73bfd1ed2aa0b8489fb39ddfc1ac2272730be0a23c877efe7ac2042216feb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-39325 affecting package multus for versions less than 4.0.2-3

CVE-2023-39325 affecting package multus for versions less than 4.0.2-3. A patched version of the package is available...

AZL-53977 CVE-2024-53257 affecting package vitess for versions less than 17.0.7-7

Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...

CVE-2024-28182 affecting package cmake for versions less than 3.21.4-14

CVE-2024-28182 affecting package cmake for versions less than 3.21.4-14. A patched version of the package is available...

CVE-2024-2398 affecting package cmake for versions less than 3.21.4-14

CVE-2024-2398 affecting package cmake for versions less than 3.21.4-14. A patched version of the package is available...

CVE-2023-6237 affecting package hvloader for versions less than 1.0.1-6

CVE-2023-6237 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...

CVE-2024-8006 affecting package nmap for versions less than 7.95-2

CVE-2024-8006 affecting package nmap for versions less than 7.95-2. A patched version of the package is available...

CVE-2023-39804 affecting package tar for versions less than 1.34-3

CVE-2023-39804 affecting package tar for versions less than 1.34-3. A patched version of the package is available...

OESA-2024-2459 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting...

WordPress GEO My WordPress plugin < 4.5 - Admin+ Arbitrary File Upload vulnerability

Admin+ Arbitrary File Upload vulnerability discovered by Michael Dyrna in WordPress Plugin GEO my WordPress versions 4.5...

CVE-2023-46218 affecting package cmake for versions less than 3.21.4-13

CVE-2023-46218 affecting package cmake for versions less than 3.21.4-13. A patched version of the package is available...

CVE-2023-27535 affecting package cmake for versions less than 3.21.4-13

CVE-2023-27535 affecting package cmake for versions less than 3.21.4-13. A patched version of the package is available...

CVE-2023-27538 affecting package cmake for versions less than 3.21.4-13

CVE-2023-27538 affecting package cmake for versions less than 3.21.4-13. A patched version of the package is available...

CVE-2023-27536 affecting package cmake for versions less than 3.21.4-13

CVE-2023-27536 affecting package cmake for versions less than 3.21.4-13. A patched version of the package is available...

AZL-53903 CVE-2024-53072 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detect when STB is not available Loading the amdpmc module as: amdpmc enablestb=1 ...can result in the following messages in the kernel ring buffer: amdpmc AMDI0009:00: SMU cmd failed. err: 0xff ioremap on R...

CVE-2024-10978 PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID

Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. The problem arises when an application query uses...

CVE-2024-10977: Use of Less Trusted Source

Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application. For example, a man-in-the-middle attacker could send a long error message that a human or screen-scraper user of psql mistake...

PT-2025-40759

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the device resource management within the drivers base code. Specifically, device resources are not always freed when a device is unregistered,...

AZL-53141 CVE-2024-50246 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr allocsize check...

CVE-2024-50057 affecting package kernel for versions less than 6.6.57.1-1

CVE-2024-50057 affecting package kernel for versions less than 6.6.57.1-1. An upgraded version of the package is available that resolves this issue...