1552 matches found
OPENSUSE-SU-2024:14571-1 docker-stable-24.0.9_ce-4.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9ce-4.1 package on the GA media of openSUSE Tumbleweed...
MAL-2024-11785 Malicious code in snap-kit-react-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 591274c196648c43d806cc38ac33a04319ff82c5c4c9b1028590552c1fe4a841 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11812 Malicious code in @flutteruki-gaming/eslint-config-flutteruki-gaming (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d4e889992a980c69235fc81b993e0417a4bf52dcb6e16a20b0c32e8cf3057fe The OpenSSF Package Analysis project identified '@flutteruki-gaming/eslint-config-flutteruki-gaming' @ 1.8.0 npm as malicious. It is considered...
MAL-2024-11691 Malicious code in requestsuuuj (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11448 Malicious code in semi-animation-styled (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11445 Malicious code in securitytest3 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in pagegraph-crawl (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11306 Malicious code in asdasssd-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11266 Malicious code in @douinfe/semi-animation-react (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11237 Malicious code in jquery.slideviewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99adb7b17da26c89371b100994f4eaef06ce19a5103f35ea6230d375af0cc95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OPENSUSE-SU-2024:14558-1 python-furo-doc-2024.8.6-2.1 on GA media
These are all security issues fixed in the python-furo-doc-2024.8.6-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14547-1 ansible-core-2.17-2.17.7-1.1 on GA media
These are all security issues fixed in the ansible-core-2.17-2.17.7-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-X3F4-45XF-RJM7 vulnerabilities
Vulnerabilities for packages: xh...
CVE-2024-52280 vulnerabilities
Vulnerabilities for packages: rancher-agent...
edk2: Integer overflows in PeCoffLoaderRelocateImage
A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability...
CVE-2024-52303 vulnerabilities
Vulnerabilities for packages: checkov, airflow, py3-aiohttp...
CVE-2024-45610
GLPI CVE-2024-45610 describes a reflected XSS in the Cable form that can be exploited by an unauthenticated user. The initial description recommends upgrading to version 10.0.17. Connected sources indicate GLPI versions affected include 9.x through 10.0.18 and third-party advisories/CSAs referenc...
MAL-2024-10777 Malicious code in realtime-translation-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e34e252889fa5780663d4a11bb4e396af8861e1c5877da57c6e558e553521302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-45608
GLPI (CVE-2024-45608) affects versions up to 10.0.18; vulnerability is a server-side SQL injection due to an issue in the preferences handling that can be triggered by an authenticated user. Root cause: missing/weak input handling in the preferences flow. Impact: high confidentiality, integrity, ...