GHSA-5MPW-4546-2WCR vulnerabilities

Vulnerabilities for packages: ruby3.3-elasticsearch, ruby3.2-elasticsearch...

Malicious code in pai-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b6dc3e380e435ff7d74a44ec8841c1577a1bd74c03ef3dc368e2514e485d8fc The OpenSSF Package Analysis project identified 'pai-web-components' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11895 Malicious code in pai-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b6dc3e380e435ff7d74a44ec8841c1577a1bd74c03ef3dc368e2514e485d8fc The OpenSSF Package Analysis project identified 'pai-web-components' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

CVE-2024-11999

CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product...

CVE-2024-11999

CVE-2024-11999 involves CWE-1104: Use of Unmaintained Third-Party Components that could enable complete control of Schneider Electric HMI devices when an authenticated user installs malicious code. The vulnerability affects Schneider Electric Harmony HMI products (e.g., HMIST6, HMIG3U, HMIG3X) an...

CVE-2024-11999

CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product...

CVE-2024-11999

CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product...

PT-2024-17393 · Schneider Electric · Schneider Electric

Name of the Vulnerable Software and Affected Versions: Schneider Electric products affected versions not specified Description: A Use of Unmaintained Third-Party Components issue exists that could allow complete control of the device when an authenticated user installs malicious code into an HMI...

CVE-2024-11999: Use of Unmaintained Third Party Components

CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product...

Schneider Electric’s various products have security vulnerabilities

Schneider Electric HMIST6 and others are products of Schneider Electric, France.Schneider Electric HMIST6 is a cost-effective, high-quality HMI panel.Schneider Electric HMIG3U is an advanced cassette base unit for general-purpose Schneider Electric HMIG3U is an advanced cassette base unit for...

MAL-2024-11887 Malicious code in @saferpay/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a2d3c2e7f9c105a15779b795e9c5e4108f8e8ada94f9d6af1446e4b0e19fbd3 The OpenSSF Package Analysis project identified '@saferpay/components' @ 5.9.2 npm as malicious. It is considered malicious because: - The packa...

Malicious code in @saferpay/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a2d3c2e7f9c105a15779b795e9c5e4108f8e8ada94f9d6af1446e4b0e19fbd3 The OpenSSF Package Analysis project identified '@saferpay/components' @ 5.9.2 npm as malicious. It is considered malicious because: - The packa...

CBL Mariner 2.0 Security Update: docker-cli / moby-cli / moby-compose / moby-engine (CVE-2024-36623)

The version of docker-cli / moby-cli / moby-compose / moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36623 advisory. - moby through v25.0.3 has a Race Condition vulnerability in the...

GHSA-8VWH-PR89-4MW2 Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

A vulnerability has been discovered in Laravel Pulse that could allow remote code execution through the public remember method in the Laravel\Pulse\Livewire\Concerns\RemembersQueries trait. This method is accessible via Livewire components and can be exploited to call arbitrary callables within t...

Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

A vulnerability has been discovered in Laravel Pulse that could allow remote code execution through the public remember method in the Laravel\Pulse\Livewire\Concerns\RemembersQueries trait. This method is accessible via Livewire components and can be exploited to call arbitrary callables within t...

CVE-2024-55661

Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in Laravel Pulse prior to version 1.3.1 that could allow remote code execution through the public remember method in the...

CVE-2024-55661 Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in Laravel Pulse prior to version 1.3.1 that could allow remote code execution through the public remember method in the...

CVE-2024-55661 Laravel Pulse Allows Remote Code Execution via Unprotected Query Method

Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in Laravel Pulse prior to version 1.3.1 that could allow remote code execution through the public remember method in the...

CVE-2024-55661

CVE-2024-55661 affects Laravel Pulse prior to 1.3.1. The vulnerability is triggered via the remember(callable $query, string $key = '') method in Laravel\Pulse\Livewire\Concerns\RemembersQueries, which allows an authenticated dashboard user to invoke arbitrary callables (functions or static metho...

PT-2024-12456 · Cleantalk · Cleantalk-Spam-Protect

Name of the Vulnerable Software and Affected Versions: CleanTalk Spam Protection versions 6.10 and below Description: The issue is related to a Missing Authorization vulnerability, which allows for broken access control. This can compromise the security of the site. The estimated number of...