ASB-A-317829112

Bulletin has no description...

ASB-A-314707751

Bulletin has no description...

PUB-A-295051886

Bulletin has no description...

ASB-A-301630648

Bulletin has no description...

ASB-A-314032846

Bulletin has no description...

ASB-A-317826159

Bulletin has no description...

PUB-A-295052588

Bulletin has no description...

ASB-A-314698312

Bulletin has no description...

ASB-A-303101658

Bulletin has no description...

PUB-A-295052332

Bulletin has no description...

ASB-A-309426390

In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

GHSA-WR6V-9F75-VH2G vulnerabilities

Vulnerabilities for packages: conftest-fips, conftest, buildkitd, kaniko, scorecard, skaffold, guac, docker, kubescape, trivy, zot...

GHSA-W9H2-PX87-74VX vantage6 remote code execution vulnerability

Impact Authenticated users could inject code into algorithm environment variables Workarounds No...

DLA-3725-1 postfix - security update

Bulletin has no description...

BELL-CVE-2024-0841

Bulletin has no description...

CVE-2023-52389

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in...

Cups Easy 跨站脚本漏洞

Cups Easy is a PHP-based purchasing and inventory software that may become a full-fledged ERP in the future. Cups Easy suffers from a cross-site scripting vulnerability that stems from insufficient escaping of the description parameter on the /cupseasylive/statemodify.php page. An attacker could...

MAL-2024-665 Malicious code in wlwz-2312-5500 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c85949273c1645637458b52979f1f1f07fe1d80347e5df1e9c5021e5c58b51e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-721 Malicious code in wlwz-2312-6102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8af0d4163cf107d93786c6115644304751f181060933cf8d948f9fb3ea540f4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-625 Malicious code in wlwz-2312-5005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c11878fb7f8d63a7c50e16d6aef593f0decc3ebde705e39c70bd7fca11531996 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...