BELL-CVE-2024-36019

Bulletin has no description...

PT-2024-27118 · Unknown · Lylme Spage

Name of the Vulnerable Software and Affected Versions: LyLme spage version 1.9.5 Description: The issue concerns Server-Side Request Forgery SSRF via the get head function. This allows for potential unauthorized access to internal resources. Recommendations: For LyLme spage version 1.9.5, conside...

MAL-2024-1493 Malicious code in @juiggitea/totam-eligendi-tenetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bccd3e610906246c57d003387d38b54031b73e52fa36b1d328eb7fe7adab8624 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1468 Malicious code in @juiggitea/possimus-impedit-est-sint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3aa1cde9fc39e1afc2e353d6b99a3cfedecde5d0345fc8f2b1e892473c054b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1457 Malicious code in @juiggitea/nostrum-a-molestias (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99199280fb22a96400c7c5464e90c6b2e70428de874fbab885afd7e999d0de09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1415 Malicious code in @juiggitea/consequuntur-iure-maxime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acd1d992b7310fef07ffe41951da097b2c107cab4ef49b0f1efa57cdc5a1a77f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

GHSA-CG4M-QJJP-7497 TYPO3 Cross-Site Scripting in link validator component

Failing to sanitize content from editors, the link validator component is susceptible to Cross-Site Scripting. A valid editor account with access to content which is scanned by the link validator component is required to exploit this vulnerability...

Denial Of Service (DoS)

typo3/cms-core is vulnerable to Denial of Service DoS. The vulnerability is due to improper session validation, which allows attackers to create an arbitrary amount of individual session-data records in the database, which results in Denial of Service...

BELL-CVE-2024-36883

Bulletin has no description...

BELL-CVE-2024-36886

Bulletin has no description...

BELL-CVE-2024-36880

Bulletin has no description...

BELL-CVE-2024-36021

Bulletin has no description...

OSV-2024-528 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69348 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...

PUB-A-322224043

In setsecurereg of sachandler.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of 4 bytes of stack memory with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-319099367

there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead to local denial of service of impaired use of the device with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-327233647

Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initialization steps...

PUB-A-326987969

In handleinit of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-322065862

In v4l2smfcqbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-326279145

In handlemsg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...