13092 matches found
MAL-2024-9694 Malicious code in localier (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9688 Malicious code in lido-council-daemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99bf57f31f9431fe457ef726885325190325ba8e48b1adc3b4c0b599405554b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9686 Malicious code in lib-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9675 Malicious code in jittery-chocolate-hoverfly (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9670 Malicious code in instrumentation-pg (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9609 Malicious code in experimental-purple-walrus (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9593 Malicious code in eighster (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9537 Malicious code in ciomiojui (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9494 Malicious code in aggregate-rose-booby (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9476 Malicious code in @taxify/taxify-code-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9474 Malicious code in @taxify/price-estimate-helper-models (npm)
--- -= Per source details. Do not edit below this line.=-...
Arbitrary Code Execution
github.com/github/git-sizer is vulnerable to Arbitrary Code Execution. The vulnerability is due to the misconfiguration of the system's PATH environment variable, which can allow malicious executables to be inadvertently run when commands are executed if the current directory is placed before the...
BELL-CVE-2024-47674
Bulletin has no description...
GHSA-XGFV-XPX8-QHCR vulnerabilities
Vulnerabilities for packages: keycloak...
CVE-2024-9936 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-43701
CVE-2024-43701 concerns Imagination Technologies PowerVR GPU DDK. The vulnerability arises from a use-after-free in the TLB invalidate path when a dma_buf is imported across multiple GPU devices, enabling a non-privileged user to perform GPU system calls that read and write freed GPU memory. Affe...
BIT-GITLAB-2024-6530 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2. When adding a authorizing an application, it can be made to render as HTML under specific circumstances...
GHSA-PPPG-CPFQ-H7WR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, kubeflow-katib, prism...