Malicious code in adapter_elasticsearch (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in activerecord_jdbcsplice-adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6483 Malicious code in activerecord_jdbcsplice-adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in action-cable_subscription_adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6376 Malicious code in action-cable_subscription_adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3035 Malicious code in source-registry-storage-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a58e938437093f6d5a08c8a6adccfdf20c7352f33de3443cb19ae4f665a87928 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in source-registry-storage-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a58e938437093f6d5a08c8a6adccfdf20c7352f33de3443cb19ae4f665a87928 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2276 Malicious code in @fdfe/ecf-http-adapter (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @fdfe/ecf-http-adapter (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a security issue in scsi bfa...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the ProtocolVsimOperationAdapter module of protocolvsimadapter.cpp, which may allow out-of-bounds reads...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the CellInfoListParserV2::FillCellInfo module of protocolnetadapter.cpp, which could result in out-of-bounds reads...

CVE-2021-47306

A vulnerability was found in the fzaprobe function in the Linux kernel's FDDI driver. Private data might be used after it has been freed, leading to an use-after-free issue, causing system instability or crashes if the freed data is accessed. Mitigation Red Hat has investigated whether a possible...

PT-2024-7650

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape, potentially allowing an attacker to escalate...

GHSA-RCM4-JV5G-WCCM zfr authentication adapter did not verify validity of tokens

Previous to @2ca5bb1c2f11537be8f94ca6867d8d69789e744a release 0.1.2, tokens weren't checked for validity/expiration. This potentially caused a security issue if expired tokens were not deleted after the expiration time was past, allowing anyone to still use invalidated authentication credentials...

GHSA-CXF7-M5G2-V594 Zend-Mail remote code execution in zend-mail via Sendmail adapter

When using the zend-mail component to send email via the Zend\Mail\Transport\Sendmail transport, a malicious user may be able to inject arbitrary parameters to the system sendmail program. The attack is performed by providing additional quote characters within an address; when unsanitized, they c...

ZendFramework potential remote code execution in zend-mail via Sendmail adapter

When using the zend-mail component to send email via the Zend\Mail\Transport\Sendmail transport, a malicious user may be able to inject arbitrary parameters to the system sendmail program. The attack is performed by providing additional quote characters within an address; when unsanitized, they c...

GHSA-GFF2-P6VM-3P8G ZendFramework potential remote code execution in zend-mail via Sendmail adapter

When using the zend-mail component to send email via the Zend\Mail\Transport\Sendmail transport, a malicious user may be able to inject arbitrary parameters to the system sendmail program. The attack is performed by providing additional quote characters within an address; when unsanitized, they c...

ZendFramework SQL injection due to execution of platform-specific SQL containing interpolations

The Zend\Db component in Zend Framework 2 provides platform abstraction, which is used in particular for SQL abstraction. Two methods defined in the platform interface, quoteValue and quoteValueList, allow users to manually quote values for creating SQL statements; these are in turn consumed by...

silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connector

A potential SQL injection vulnerability was identified by using the silverstripe/postgresql database adapter. While unlikely to be exploitable, we have patched silverstripe/framework to ensure that table names are safely escaped before being passed to database adapters or user code...