Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-10879 Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

Authentication Bypass

org.apache.tomcat, tomcat-catalina is vulnerable to Authentication Bypass. The vulnerability exists due to improper exception handling in custom Jakarta Authentication ServerAuthContext components, allowing attackers to bypass authentication and gain unauthorized access...

PCI/PM Linux Kernel DoS

The vulnerability of the PCI/PM components in the Linux operating system’s kernel is related to improper error handling in the function pcideviceremove. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel DoS

The vulnerability of the accel/ivpu components in the Linux operating system’s kernel is related to improper locking of resources in the ivpudevinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DRM AST DoS

The vulnerability of DRM/ast components in Linux operating systems is related to improper locking of resources in the astdpsetonoff function. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has released a new version which addresses the vulnerabilities. Vulnerability Details CVEID:CVE-2024-45296 DESCRIPTION: pillarjs Path-to-RegExp is vulnerable...

Linux kernel s390/dasd DoS

The vulnerability of the s390/dasd components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE-SU-2024:4036-1 Security update for httpcomponents-client, httpcomponents-core

This update for httpcomponents-client, httpcomponents-core fixes the following issues: httpcomponents-client: - Update to version 4.5.14 HTTPCLIENT-2206: Corrected resource de-allocation by fluent response objects. HTTPCLIENT-2174: URIBuilder to return a new empty list instead of unmodifiable...

Linux DRM AMD Display Kernel DoS

The vulnerability of components related to DRM, AMD, and display in the Linux operating system is associated with a memory corruption in the dpdscclockenread function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Malicious code in galaktika-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9bbc46888ec54d0f044dbb94a3b9d6dfd27c7279fcfd31387eb82580eaa972c The OpenSSF Package Analysis project identified 'galaktika-components' @ 0.1.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-10747 Malicious code in galaktika-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9bbc46888ec54d0f044dbb94a3b9d6dfd27c7279fcfd31387eb82580eaa972c The OpenSSF Package Analysis project identified 'galaktika-components' @ 0.1.2 npm as malicious. It is considered malicious because: - The packa...

Malicious code in galaktika-components-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 671c7461688fbe5d0af479ac40ecd1b4e4c79918ca524fc0c26608fd8b2dea9a The OpenSSF Package Analysis project identified 'galaktika-components-test' @ 0.1.148 npm as malicious. It is considered malicious because: - Th...

MAL-2024-10741 Malicious code in galaktika-components-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 671c7461688fbe5d0af479ac40ecd1b4e4c79918ca524fc0c26608fd8b2dea9a The OpenSSF Package Analysis project identified 'galaktika-components-test' @ 0.1.148 npm as malicious. It is considered malicious because: - Th...

MAL-2024-10776 Malicious code in react-pro-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e36b1f84a78fdd75413789d169ba2770aee6218073cb5a52d7ce2997b7684a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-pro-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e36b1f84a78fdd75413789d169ba2770aee6218073cb5a52d7ce2997b7684a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cluster Component DoS

Vulnerability of the Cluster component: General database management systems like MySQL Cluster and their components like the Server component: The Oracle MySQL Server component exists due to incorrect validation of input data in these components. Exploiting this vulnerability can allow an attacke...

Linux kernel DRM/i915/gt DoS

The vulnerability of DRM/i915/gt components in the Linux operating system is related to an achievable exploit. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

s390/zcrypt Kernel Privilege Escalation

The vulnerability of the s390/zcrypt components in Linux operating systems is related to errors that occur after liberation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

s390/cio DoS

The vulnerability of the s390/cio component of the Linux operating system’s kernel is related to the state of the ccwdevicesetonline function. Exploiting this vulnerability can allow an attacker to gain increased privileges within the system...