Malicious code in launchpad6-dev-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30c80c00a3a3fff99c7e886c9aa19aa90f914ed903e9039de87952a37921e18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12151 Malicious code in launchpad6-dev-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30c80c00a3a3fff99c7e886c9aa19aa90f914ed903e9039de87952a37921e18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SQL Injection

github.com/apache/trafficcontrol is vulnerable to SQL Injection. The vulnerability is due to improper input validation in Traffic Ops, allowing a privileged user with roles such as "admin," "federation," "operations," "portal," or "steering" to execute arbitrary SQL queries through...

GHSA-VQ94-9PFV-CCQR SQL injection in Apache Traffic Control

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...

SQL injection in Apache Traffic Control

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...

CVE-2024-45387

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...

CVE-2024-45387 Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...

CVE-2024-45387 Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...

Apache Traffic Control 安全漏洞

Apache Traffic Control is the United States Apache Apache Foundation's set of distributed , scalable content delivery solutions. The product is mainly used to build large-scale content delivery network. Apache Traffic Control suffers from a SQL injection vulnerability that stems from a lack of...

CVE-2024-45387: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...

PT-2025-9941 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue has been identified in the Linux kernel related to the bpf struct ops when CONFIG MODULES=n. The problem arises because the btf id of the "struct module" is...

Authentication Bypass Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Overview Authentication bypass vulnerability exists in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official...

CVE-2024-10205

Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit Hitachi Ops Center Analyzer detail view component, Hitachi Infrastructure Analytics Advisor on Linux, 64 bit Hitachi Data Center Analytics component .This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00...

CVE-2024-10205 Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit Hitachi Ops Center Analyzer detail view component, Hitachi Infrastructure Analytics Advisor on Linux, 64 bit Hitachi Data Center Analytics component .This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00...

CVE-2024-10205 Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit Hitachi Ops Center Analyzer detail view component, Hitachi Infrastructure Analytics Advisor on Linux, 64 bit Hitachi Data Center Analytics component .This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00...

CVE-2024-10205

CVE-2024-10205: Authentication bypass affecting Hitachi Ops Center Analyzer (Linux 64-bit, detail view component) and Hitachi Infrastructure Analytics Advisor (Linux 64-bit). Affected ranges: Ops Center Analyzer 10.0.0-00 up to before 11.0.3-00; Infrastructure Analytics Advisor 2.1.0-00 through 4...

Hitachi Ops Center Analyzer和Hitachi Infrastructure Analytics Advisor 安全漏洞

Hitachi Ops Center Analyzer and Hitachi Infrastructure Analytics Advisor are both products of Hitachi, Ltd. of Japan.Hitachi Ops Center Analyzer is a data center management software. It monitors, reports, and correlates end-to-end performance from servers to storage.Hitachi Infrastructure Analyti...

CVE-2024-10205: Missing Authentication for Critical Function

Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit Hitachi Ops Center Analyzer detail view component, Hitachi Infrastructure Analytics Advisor on Linux, 64 bit Hitachi Data Center Analytics component .This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00...

The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure in the Hitachi Ops Center Common Services lies in its use of default account information, which allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure in the Hitachi Ops Center Common Services is related to the use of default account information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...

The vulnerability of the ops component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ops component in the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...