MAL-2024-6661 Malicious code in aptly-cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in approval_ratings-cli-app (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6625 Malicious code in apigee-cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6542 Malicious code in aker-cas-cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aker-cas-cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in agile_cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acme_cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1752 Malicious code in amp-angular-cli (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in amp-angular-cli (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ably-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d967a47be503ff66f55656b06164bada463c061062132aa799b7a22e5856b6f0 The OpenSSF Package Analysis project identified 'ably-cli' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1716 Malicious code in ably-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d967a47be503ff66f55656b06164bada463c061062132aa799b7a22e5856b6f0 The OpenSSF Package Analysis project identified 'ably-cli' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1988 Malicious code in @expue/cli (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @expue/cli (npm)

--- -= Per source details. Do not edit below this line.=-...

Tp-Link ER7206 Omada Gigabit VPN Router cli_server debug leftover debug code vulnerability

Talos Vulnerability Report TALOS-2024-1947 Tp-Link ER7206 Omada Gigabit VPN Router cliserver debug leftover debug code vulnerability June 25, 2024 CVE Number CVE-2024-21827 SUMMARY A leftover debug code vulnerability exists in the cliserver debug functionality of Tp-Link ER7206 Omada Gigabit VPN...

atuin (>=0.3.0 <=11.0.0), atuin-client (>=0.6.2 <=11.0.0) +27 more potentially affected by unknown CVE via chrono-english (=0.1.8)

chrono-english CARGO version =0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on chrono-english and may be impacted: - atuin =0.3.0, =0.6.2, =0.6.2, =0.1.0, =1.9.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.2, =0.4.0, =0.7.0, =0.0.4, =1.0.0 and more Sour...

Important: docker

Issue Overview: A file permissions vulnerability was found in Moby Docker Engine. Copying files by using into a specially-crafted container can result in Unix file permission changes for existing files in the host's filesystem, which might lead to permissions escalation and allow an attacker acce...

CVE-2024-38359

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...

CVE-2024-38359 Lightning Network Daemon Onion Bomb

The Lightning Network Daemon lnd - is a complete implementation of a Lightning Network node. A parsing vulnerability in lnd's onion processing logic and lead to a DoS vector due to excessive memory allocation. The issue was patched in lnd v0.17.0. Users should update to a version v0.17.0 to be...

CVE-2024-38359

The CVE-2024-38359 vulnerability affects the Lightning Network Daemon (lnd) in its onion processing logic, causing a Denial-of-Service due to excessive memory allocation. It has been patched in lnd v0.17.0; upgrading to a version greater than 0.17.0 mitigates the issue. As a partial mitigation, u...

Important: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Client tkn for 1.15.0 release

Red Hat OpenShift Pipelines Client tkn for 1.15.0 has been released. Red Hat OpenShift Pipelines Client, tkn for the 1.15.0 release, provides a CLI tool to interact with the Pipelines and Triggers components provided by Red Hat OpenShift Pipelines 1.15.0 The tkn CLI tool is delivered as an RPM...