CVE-2024-39499 vmci: prevent speculation leaks by sanitizing event in event_deliver()

In the Linux kernel, the following vulnerability has been resolved: vmci: prevent speculation leaks by sanitizing event in eventdeliver Coverity spotted that eventmsg is controlled by user-space, eventmsg-eventdata.event is passed to eventdeliver and used as an index without sanitization. This...

Security Bulletin: Multiple vulnerabilities in WebSphere Application Server Liberty affect IBM Operations Analytics - Log Analysis (CVE-2024-25026, CVE-2024-22329)

Summary IBM WebSphere Application Server Liberty is vulnerable to denial of service and server-side request forgery. Vulnerability Details CVEID:CVE-2024-25026 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are...

MAL-2024-7729 Malicious code in cx-web-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4311da313c4de72f9e25c5c573ce6a9ebe1bd2cb1c24d5b37af1e4e6d23717ab The OpenSSF Package Analysis project identified 'cx-web-themes' @ 200.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7730 Malicious code in react-native-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1015ecd9733ee94027b1c081070e5866c9bdeb055d78f16a4664531fadba690d The OpenSSF Package Analysis project identified 'react-native-latest' @ 200.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-7696 Malicious code in mva10-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbebcbc3b898726caa3bec8450b38747b8692941527db5fae805fc4d53e4d925 The OpenSSF Package Analysis project identified 'mva10-angular' @ 8.2.0 npm as malicious. It is considered malicious because: - The package...

What’s New in Rapid7 Products & Services: Q2 2024 in Review

This quarter we continued to make investments that provide security professionals with a holistic, actionable view of their entire attack surface. In Q2, we focused on enhancing visualization, prioritization, and integration capabilities across our key products and services. Below we’ve highlight...

MAL-2024-7694 Malicious code in dependencyconfusion7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f7917b183eaefa5d99ccf1984a0d7b5fec312946bc51784c3c850ef10676c89 The OpenSSF Package Analysis project identified 'dependencyconfusion7' @ 2.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-7692 Malicious code in sap-attr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a59ce389b5949cf7bf1c25f52760579b8f39915fefd0b646fab91cdf176d0ef2 The OpenSSF Package Analysis project identified 'sap-attr' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7690 Malicious code in sap-cb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 381eb9774ec795ee1d1d09eea1dfe84d6e8d42293396bcbed791759dcf09a045 The OpenSSF Package Analysis project identified 'sap-cb' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-7686 Malicious code in sap-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6249398a35512fd55bc5d53524ce828041f42912e572a9496423f603b6cd6ab8 The OpenSSF Package Analysis project identified 'sap-card' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7674 Malicious code in sap-ans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 039a7fc0556d340f2ad4abfec6c8573743803edbe7e104947364c0332716d7c5 The OpenSSF Package Analysis project identified 'sap-ans' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in sap-bigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49ce1a4e6530cdac3d952e9fcaac5dff16e940cb79d6c1e0f5216c3aad04613d The OpenSSF Package Analysis project identified 'sap-bigger' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7683 Malicious code in sap-bookmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 006cf595c27f1836eda2b7310fe4ccb2d335997b79d431786210d980a379dde2 The OpenSSF Package Analysis project identified 'sap-bookmark' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7682 Malicious code in sap-body (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d1b0f3744113610061c762f399d006decabc0642dbbcc0b313cd9ca01f13d57 The OpenSSF Package Analysis project identified 'sap-body' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7685 Malicious code in sap-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 939b1cf364289814b2082a4f38e527017bd2981b69b037b790ac750d8056fc4d The OpenSSF Package Analysis project identified 'sap-calendar' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7677 Malicious code in sap-audiobitrates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a562c3515e1c83b0487a98af34b44a3adaae6743b3d18bc8de7eebd31e0537bb The OpenSSF Package Analysis project identified 'sap-audiobitrates' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-categoryid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2fe1c470d8ba6b59f035e8e12de6301dcfa748ec23614655546bbfae264053 The OpenSSF Package Analysis project identified 'sap-categoryid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7667 Malicious code in sap-categoryid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2fe1c470d8ba6b59f035e8e12de6301dcfa748ec23614655546bbfae264053 The OpenSSF Package Analysis project identified 'sap-categoryid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7662 Malicious code in sap-caption (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7ad52739b8959d44b7af471d8a6963424e8c9f51bc6754dbf7fca30bef54aa2 The OpenSSF Package Analysis project identified 'sap-caption' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-catorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4d0a65fe6fa8befaf90ff6e8553923a6f0018202e771c06fbabca90482ce306 The OpenSSF Package Analysis project identified 'sap-catorder' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...