UBUNTU-CVE-2024-3056

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

TLS Certificate Verification Bypass

github.com/mickael-kerjean/filestash vulnerable to TLS certificate verification bypass. The vulnerability is due to insecure email verification code transmission, as TLS verification is being bypassed. Attackers can exploit this to intercept or tamper with email communications, potentially gainin...

CVE-2024-32758

Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange...

CVE-2024-32758 exacqVision - Key exchanges

Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange...

CVE-2024-32758

CVE-2024-32758 affects Johnson Controls exacqVision client/server communications, where under certain conditions the key exchange uses insufficient length. Affected: exacqVision Client and Server (all versions). Root cause: inadequate encryption strength leading to potential decryption of traffic...

CLSA-2024-1722512538 Fix of 10 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-25744 - x86/sev: Rename memencrypt.c to memencryptamd.c - x86: Introduce ia32enabled - x86/coco: Disable 32-bit emulation by default on TDX and SEV CVE-url: https://ubuntu.com/security/CVE-2024-36016 - tty: ngsm: fix frame reception handling - tty:...

MAL-2024-7870 Malicious code in persona-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32b489c0a0bbd44ab1697c3d0492595441e65b30a71a26af76a7dce54fb3d706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PUB-A-323926303

Bulletin has no description...

MAL-2024-7858 Malicious code in kekepaketti-git (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe3fe591280b7e540d3769aca60a5a18013d4081d1fc8006f5416636354c0097 The OpenSSF Package Analysis project identified 'kekepaketti-git' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2024-41262

mmudb v1.9.3 was discovered to use the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText functions, possibly allowing attackers to intercept communications via a man-in-the-middle attack...

Malicious code in psh-hydra-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e602e73e004aedbd93e2617bee443de236f268346b5b57bd42fcd32669825fd The OpenSSF Package Analysis project identified 'psh-hydra-sdk' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an inconsistency between the data length and count during a write operation in the nfc/nci module, where...

Malicious code in depe-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf5272e13c97b298b088b9e4b50c2900d47ecda4bdb7beccb868c397a7c2ec2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7834 Malicious code in melio-platform-api-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb4e0efafa3bf0645819f2aa88cfdc7778f938470c0984afc5e1f1504df982aa The OpenSSF Package Analysis project identified 'melio-platform-api-client' @ 5.0.0 rubygems as malicious. It is considered malicious because: -...

Malicious code in symphony-familiarity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eff03dd28a4225440b053e0619ca9619d5c18fbd90e59b8513587d836b4df052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7826 Malicious code in nvk-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0570e31c6c015817cd5fce4308786f1fe2264b4c8bb64fab755b0df9ba0c9f7 The OpenSSF Package Analysis project identified 'nvk-tools' @ 1.2.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7818 Malicious code in ent-widget-ssn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d56160353925d7d4c18c2e8cc517fa031138c0b57634f16503d9db72ccbb6087 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ent-widget-ssn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d56160353925d7d4c18c2e8cc517fa031138c0b57634f16503d9db72ccbb6087 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 737879d1d600ff1a2162645b8e3951f8f7f8f9c3494b052c5f28eef84339f1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7816 Malicious code in ent-widget-military (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbdebed9b78571c779a871a94b08827dce4891379340dbcdcac9864d33d6435d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...