DRUPAL-CONTRIB-2024-010

This module provides an alternative mean of rebuilding the Content Access table. The module doesn't sufficiently reset the state of content access when the module is uninstalled...

VMware Alert: Uninstall EAP Now - Critical Flaw Puts Active Directory at Risk

VMware is urging users to uninstall the deprecated Enhanced Authentication Plugin EAP following the discovery of a critical security flaw. Tracked as CVE-2024-22245 CVSS score: 9.6, the vulnerability has been described as an arbitrary authentication relay bug. "A malicious actor could trick a...

PT-2024-1777 · Vmware · Vmware Enhanced Authentication Plug-In

Name of the Vulnerable Software and Affected Versions: VMware Enhanced Authentication Plug-in EAP affected versions not specified Description: The issue is related to arbitrary authentication relay and session hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in EAP. Th...

Intel® QSFP+ Configuration Utility Software Advisory

Summary: A potential security vulnerability in some Intel® QSFP+ Configuration Utility software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® QSFP+ Configuration Utility softwar...

Intel® PM Software Advisory

Summary: A potential security vulnerability in some Intel® Performance Maximizer PM software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® PM. Vulnerability Details: CVEID:...

Intel® SUR for Gameplay Software Advisory

Summary: Potential security vulnerabilities in the Intel® System Usage Report SUR for Gameplay Software may allow escalation of privilege. Intel is not releasing updates to mitigate these potential vulnerabilities and has issued a Product Discontinuation Notice for Intel® System Usage Report for...

CVE-2024-24821

Composer is a dependency Manager for the PHP language. In affected versions several files within the local working directory are included during the invocation of Composer and in the context of the executing user. As such, under certain conditions arbitrary code execution may lead to local...

MAL-2024-901 Malicious code in wlwz-2312-8102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d4ba8d8347a741afe930d1a57480d1b2674554816cfec9be4f6b247db6b2a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-843 Malicious code in wlwz-2312-7407 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5598f2500474143c1b6765ca2f10626af481f2562493214cc9504a92b497a5f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-761 Malicious code in wlwz-2312-6506 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7aea22472e70a964e13cab36afaced4e3acd063cd17957600a0f42dc8183216d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-727 Malicious code in wlwz-2312-6108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99edbe296b84fa648a12e2f1eb3d3d21a29db3b8a1a08ec2932aa350f5d1ab1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-381 Malicious code in wlwz-2312-2304 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5588dd9053495627112852a1241039c004134918d531a651a1fc73c3b76fa78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-273 Malicious code in wlwz-2312-1104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e66ba5fd493bc1e8698e5af37fff100b470a08e7185da4c274733a24380e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-22415 Unsecured endpoints in the jupyter-lsp server extension

jupyter-lsp is a coding assistance tool for JupyterLab code navigation + hover suggestions + linters + autocompletion + rename using Language Server Protocol. Installations of jupyter-lsp running in environments without configured file system access control on the operating system level, and with...

GHSA-4QHP-652W-C22X Unsecured endpoints in the jupyter-lsp server extension

Impact Installations of jupyter-lsp running in environments without configured file system access control on the operating system level, and with jupyter-server instances exposed to non-trusted network are vulnerable to unauthorised access and modification of file system beyond the jupyter root...

PT-2024-19406

Name of the Vulnerable Software and Affected Versions jupyter-lsp versions prior to 2.2.2 Description The issue affects installations of jupyter-lsp running in environments without configured file system access control and with jupyter-server instances exposed to non-trusted networks, allowing...

MAL-2023-8726 Malicious code in discord-sb-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66350475cf0f0b373fa6a00f509ac77b07c132e71ff813aad93097a9f92ee6ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8715 Malicious code in allianz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acefcd666d8be4ff038f0b8b5999c4f2921bc275a04c9480e3cfcc95a190fca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-6253

A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file...

CVE-2023-6253

A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file...