14571 matches found
MAL-2024-2373 Malicious code in firefly-shared-ts (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in firefly-shared-ts (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7079 Malicious code in @ozon-shared-deps/dayjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @hpanel-mf/shared (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3007 Malicious code in shared (npm)
False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...
MAL-2024-7074 Malicious code in @expue/shared (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @expue/shared (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @corp-shared/adobe (npm)
--- -= Per source details. Do not edit below this line.=-...
SUSE CVE-2024-38591
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix deadlock on SRQ async events. xalock for SRQ table may be required in AEQ. Use xastoreirq/ xaeraseirq to avoid deadlock...
GLib: Privilege Escalation
Background GLib is a library providing a number of GNOME's core objects and functions. Description A vulnerability has been discovered in GLib. Please review the CVE identifier referenced below for details. Impact When a GDBus-based client subscribes to signals from a trusted system service such ...
UBUNTU-CVE-2024-6162
A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on the AJP listener. This issue arises because the same buffer is used to decode the paths for multiple requests simultaneously, leading to incorrect path information being processe...
CVE-2021-47613
In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: fix completion handling The driver currently assumes that the notify callback is only received when the device is done with all the queued buffers. However, this is not true, since the notify callback could be called...
CVE-2021-47613 i2c: virtio: fix completion handling
In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: fix completion handling The driver currently assumes that the notify callback is only received when the device is done with all the queued buffers. However, this is not true, since the notify callback could be called...
DEBIAN-CVE-2024-38591
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix deadlock on SRQ async events. xalock for SRQ table may be required in AEQ. Use xastoreirq/ xaeraseirq to avoid deadlock...
UBUNTU-CVE-2024-38591
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix deadlock on SRQ async events. xalock for SRQ table may be required in AEQ. Use xastoreirq/ xaeraseirq to avoid deadlock...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows kernel Privilege Escalation
The vulnerability of the Windows operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
Moodle Security Breach
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from the use of the same key for a user's QR code login key and automatic login k...
What is DevSecOps and Why is it Essential for Secure Software Delivery?
Traditional application security practices are not effective in the modern DevOps world. When security scans are run only at the end of the software delivery lifecycle either right before or after a service is deployed, the ensuing process of compiling and fixing vulnerabilities creates massive...