GHSA-PQ67-6M6Q-MJ2V vulnerabilities

Vulnerabilities for packages: py3-pip, jupyter-docker-stacks, jwt-tool, kubeflow-jupyter-web-app, airflow, dask-kubernetes, superset, confluent-docker-utils, dask-gateway, jupyter-base-notebook, kserve, pypy-3.10, kubeflow-katib, datadog-agent, py3-cassandra-medusa, pypy-3.11, mlflow, ggshield, a...

CVE-2024-49588

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-49588

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-49588

CVE-2024-49588 affects the Palantir oracle-sidecar component. Affected versions are 0.347.0 through 0.543.0, with multiple endpoints susceptible to SQL injections. The vulnerability is described across several sources as authenticated SQL injection weaknesses in oracle-sidecar, enabling potential...

CVE-2024-49588 Multiple authenticated SQL injections in oracle-sidecar

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-49588 Multiple authenticated SQL injections in oracle-sidecar

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

Palantir sls-oracle-sidecar SQL注入漏洞

Palantir sls-oracle-sidecar is a utility program from Palantir Corporation, USA. A SQL injection vulnerability exists in Palantir sls-oracle-sidecar versions 0.347.0 through 0.543.0, which stems from multiple endpoints that are susceptible to SQL injection attacks...

PT-2024-33556 · Oracle · Oracle-Sidecar

Name of the Vulnerable Software and Affected Versions: oracle-sidecar versions 0.347.0 through 0.543.0 Description: The issue concerns SQL injections in multiple endpoints. An unauthenticated attacker can compromise data. Recommendations: For versions 0.347.0 through 0.543.0, upgrade the affected...

CVE-2024-49588: Improper Neutralization of Special Elements used in an SQL Command

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-44145

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...

CVE-2024-44145

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...

CVE-2024-44145

CVE-2024-44145 affects macOS Sequoia 15, iOS 18, and iPadOS 18. The issue, tied to Sidecar, could allow a physically proximate attacker to bypass the Lock Screen due to a state-management flaw. Apple fixed the vulnerability in the indicated OS versions (Sequoia 15, iOS 18, iPadOS 18) through impr...

CVE-2024-44145

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS version 15, which originated when an attacker with physical access to a Sidecar-enabled macOS device may be able to bypass the lock screen...

CVE-2024-44145: Undefined Security Weakness

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...

PT-2024-30981

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15 iOS versions prior to 18 iPadOS versions prior to 18 Description The issue allows an attacker with physical access to a macOS device with Sidecar enabled to bypass the Lock Screen. This was addressed through improved...

GHSA-CX63-2MW6-8HW5 vulnerabilities

Vulnerabilities for packages: airflow, py3.9-setuptools, checkov, k8s-sidecar, nvidia-nsight-compute-13.2, request-1276, nemo, nvidia-nsight-compute-13.1, az, py3-pipenv, reflex, kubeflow-katib, superset, py3-cassandra-medusa...

CVE-2024-6345 vulnerabilities

Vulnerabilities for packages: airflow, py3.9-setuptools, checkov, k8s-sidecar, nvidia-nsight-compute-13.2, request-1276, nemo, nvidia-nsight-compute-13.1, az, py3-pipenv, reflex, kubeflow-katib, superset, py3-cassandra-medusa...

CVE-2024-3651 vulnerabilities

Vulnerabilities for packages: py3-idna, k8s-sidecar, dask-gateway, confluent-docker-utils, az, kubeflow-volumes-web-app, py3-pipenv, kubeflow-katib, kubeflow-pipelines, kserve, nvidia-nsight-compute-13.2, nvidia-nsight-compute-13.1, py3-cassandra-medusa, kubeflow-jupyter-web-app, checkov, jwt-too...

GHSA-248V-346W-9CWC vulnerabilities

Vulnerabilities for packages: jwt-tool, kubeflow-jupyter-web-app, airflow, kubeflow-pipelines-visualization-server, py3-certifi, confluent-docker-utils, kubeflow-volumes-web-app, superset, dask-gateway, kubeflow-katib, patroni, py3-cassandra-medusa, reflex, mlflow, az, kubeflow-pipelines,...