PT-2024-19415 · Dell · Dell Recoverpoint For Virtual Machines

Name of the Vulnerable Software and Affected Versions: Dell RecoverPoint for Virtual Machines versions 5.3.x Dell RecoverPoint for Virtual Machines version 6.0.SP1 Description: The issue is an OS Command injection vulnerability that could be exploited by an unauthenticated remote attacker to...

Malicious code in @ebay/ui-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910fed2596a854101b97448fdf2993d6012a25a091cf60e0f3c47540f295af3e @ebay/[email protected] is a scoped React UI component library published under the eBay organization scope. No indicators of credential exfiltratio...

Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days

Microsoft has released patches to address 73 security flaws spanning its software lineup as part of its Patch Tuesday updates for February 2024, including two zero-days that have come under active exploitation. Of the 73 vulnerabilities, 5 are rated Critical, 65 are rated Important, and three and...

CVE-2024-0169

Dell Unity, versions 5.3 and prior, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2024-0169

Dell Unity, versions 5.3 and prior, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2023-50386

A flaw was found in Apache Solr. In the affected versions, ConfigSets accept uploading Java jar and class files through the ConfigSets API. When backing up Solr Collections, these ConfigSet files are saved to the disk when using the LocalFileSystemRepository the default for backups. If the backup...

Malicious code in styled-compoment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c83f145b667c0aea6b36d3009e7958a122f49e451f7e54d6c20e42437a72e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-pkg1-random (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77270538ca293a7f66d412f3eb3ec40d376c802f70e860e1dfd8086497bb8f6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-32479

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by...

Malicious code in health-gbm-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31170222d23eda1bafbe62eb13c6a349bed16902d0fbaaccc1a5258c32926b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ngpd-merceros-ui-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b9c719bf14b04e4b0155b8641b63f83c3a854798e6f3038be2d9f6d25e73c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-22107

An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method systemSettingsDnsDataAction at /opt/webapp/src/AppBundle/Controller/React/SystemSettingsController.php is vulnerable to command injection via the /old/react/v1/api/system/dns/data endpoint. An authenticated attacker can...

Malicious code in hub-blockly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a569a2ddf66ac93b021560bb8b3ef62f8c0a81db49d53de3ce5e1648b68de76f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-dmall-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd9c3a4166db72fb9307f7a0e8727926cdbf66166bab94d2031d450120a8f036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myonlife1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc91fc3e9b6953561e82f58838788f833d660729577e1cab84bd0cdc265aeb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-cas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d34434c25cc547fc15a7c3f59fb63cd2697250ac930ac08f8ee019657417dc3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2023-40547

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...

CVE-2023-40547

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...

Remote code execution

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...

CVE-2023-40547 Shim: rce in http boot support may lead to secure boot bypass

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...