dotnet: Multiple .NET components susceptible to hash flooding

A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...

dotnet: Multiple .NET components susceptible to hash flooding

A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...

CVE-2024-43551

Windows Storage Elevation of Privilege Vulnerability...

Microsoft Windows Print Spooler Components 安全漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Print Spooler Components. An attacker could exploit the vulnerability to elevate privileges. The following products and editions...

PT-2024-38452 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPMM versions prior to 12.1.0.4 Description: Insecure permissions in Ivanti EPMM allow a local authenticated attacker to modify sensitive application components or access and modify sensitive configuration files without proper...

MAL-2024-9090 Malicious code in hilla-components-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10fa0be1901d7dc877afdf66a185a7450e3e75a9377cf32d1618128c64862a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hilla-components-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10fa0be1901d7dc877afdf66a185a7450e3e75a9377cf32d1618128c64862a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NuGet Package 'Microsoft.ML.Mkl.Components' Detection

The remote host has a 'Microsoft.ML.Mkl.Components' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'...

Malicious code in @b2bneo/components-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1d577f52f10cee6de3de2dee9eb8d3d70fb94c04b41f3dfb93794409066d6c8 The OpenSSF Package Analysis project identified '@b2bneo/components-tabs' @ 1.3.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-9069 Malicious code in @b2bneo/components-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1d577f52f10cee6de3de2dee9eb8d3d70fb94c04b41f3dfb93794409066d6c8 The OpenSSF Package Analysis project identified '@b2bneo/components-tabs' @ 1.3.0 npm as malicious. It is considered malicious because: - The...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to OS version: 16002.44.0 Browser version: 129.0.6668.80 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific:...

Synology DiskStation Manager Path Traversal (CVE-2013-6987)

Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager DSM before 4.3-3810 Update 3 allow remote attackers to read, write, and delete arbitrary files via a .. dot dot in the 1 path parameter to filedelete.cgi or 2 folderpath parameter to...

CVE-2024-8096

...

CVE-2024-9202

In Eclipse Dataspace Components versions 0.1.3 to 0.9.0, the Connector component filters which datasets = data offers another party can see in a requested catalog, to ensure that only authorized parties are able to view restricted offers. However, there is the possibility to request a single...

CVE-2024-9202 EDC DataSetResolver policy filtering missing

In Eclipse Dataspace Components versions 0.1.3 to 0.9.0, the Connector component filters which datasets = data offers another party can see in a requested catalog, to ensure that only authorized parties are able to view restricted offers. However, there is the possibility to request a single...

CVE-2024-9202 EDC DataSetResolver policy filtering missing

In Eclipse Dataspace Components versions 0.1.3 to 0.9.0, the Connector component filters which datasets = data offers another party can see in a requested catalog, to ensure that only authorized parties are able to view restricted offers. However, there is the possibility to request a single...

CVE-2024-9202

CVE-2024-9202 affects Eclipse Dataspace Components versions 0.1.3–0.9.0. The Connector’s catalog filtering fails for single-dataset requests, potentially allowing unauthorized parties to view restricted datasets. The issue stems from missing filtering in the DatasetResolverImpl (lines 76–79). Exp...

PT-2024-39485 · Eclipse · Eclipse Dataspace Components

Name of the Vulnerable Software and Affected Versions: Eclipse Dataspace Components versions 0.1.3 through 0.9.0 Description: The issue concerns the Connector component in Eclipse Dataspace Components, which is responsible for filtering datasets that another party can see in a requested catalog...

Eclipse Dataspace Components 安全漏洞

Eclipse Dataspace Components is a development connector for the Eclipse Dataspace Components open source. A security vulnerability exists in Eclipse Dataspace Components versions 0.1.3 through 0.9.0, which stems from a lack of proper filtering to expose sensitive information...

Malicious code in design-system-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa76659f890e0326b1b129f7cf3c39dd4b242fa297217ef6b98e4b34fa602ba2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...