CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

Command injection

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

Malware in @monokera/react-components-storybook

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti Connect Secure ICS, formerly known as Pulse Connect Secure and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This...

VulnCheck KEV: CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance...

Vulnerabilities fixed in IBM DB2

IBM has fixed vulnerabilities in several DB2 products such as DB2, DB2 for Cloud Pak and Web Query for i. A malicious party could exploit the exploit the vulnerabilities to grant himself locally elevated privileges assigned arbitrary code and thus execute arbitrary code with potentially privilege...

Malicious code in paytm-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17a3cc5106fdbcfdb7b5fcf3fc077142981c268b775e90e73b33fb15d200bb80 The OpenSSF Package Analysis project identified 'paytm-common-components' @ 9.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-32 Malicious code in paytm-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17a3cc5106fdbcfdb7b5fcf3fc077142981c268b775e90e73b33fb15d200bb80 The OpenSSF Package Analysis project identified 'paytm-common-components' @ 9.0.1 npm as malicious. It is considered malicious because: - The...

UMC software Product Management Heap Buffer Overflow DoS

The vulnerability of the UMC software product management components, including Opcenter Quality, SIMATIC PCS neo, SINUMERIK Integrate RunMyHMI/Automotive, Totally Integrated Automation Portal TIA Portal, is related to the use of an unauthorized intermediate policy file. Exploiting this...

PT-2024-18986 · View · View

Name of the Vulnerable Software and Affected Versions: view component versions prior to 3.9.0 and 2.83.0 Description: The view component framework for Ruby on Rails has a cross-site scripting issue that can impact anyone rendering a component directly from a controller with the view component gem...

Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that might be identified and exploited with automated tools. IBM has addressed the vulnerabilities. Vulnerability Details CVEID:CVE-2023-29827 DESCRIPTION: Node.js ejs module could allow a remote authenticated attacker t...

@darajs/components (>=1.0.0-a.1, <=1.5.1), @datalayer-jupyter/widgets (>=0.0.5, <=0.0.6) +13 more potentially affected by CVE-2023-46308 via plotly.js (>=2.0.0-rc.0, <=2.23.2)

plotly.js NPM version =2.0.0-rc.0, =1.0.0-a.1, =0.0.5, =0.0.1, =0.47.0, =0.50.3, =1.0.0, =0.0.23, =1.33.0-rc.1, =1.0.0, =1.17.1, =0.1.3, =0.23.0, =1.0.0, =1.0.5 - react-chart-editor 0.45.0-rc.0 - survey-analytics 1.9.7 Source cves: CVE-2023-46308 Source advisory: GHSA-WJC4-73Q6-GV3M...

Malicious code in airslate-core-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c21f5962b915c0b031edeb72b4f1d9025ac43bfbbf6be787ea90cba1e1e8fedc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mw-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab85f947099773c7e6dd5b4c3abd115db9beee7e407c87916ef282f8992ac845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in mw-common-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in airslate-core-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-24 Malicious code in airslate-core-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c21f5962b915c0b031edeb72b4f1d9025ac43bfbbf6be787ea90cba1e1e8fedc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-50711

vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and prior to version 0.12.0, an issue in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper can lea...