MAL-2024-10879 Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

Authentication Bypass

org.apache.tomcat, tomcat-catalina is vulnerable to Authentication Bypass. The vulnerability exists due to improper exception handling in custom Jakarta Authentication ServerAuthContext components, allowing attackers to bypass authentication and gain unauthorized access...

The vulnerability of DRM/AST components in Linux operating systems allows a perpetrator to trigger a service failure.

The vulnerability of DRM/ast components in Linux operating systems is related to improper locking of resources in the astdpsetonoff function. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Vulnerabilities of PCI/PM components in the Linux operating system’s kernel, allowing attackers to trigger service failures

The vulnerability of the PCI/PM components in the Linux operating system’s kernel is related to improper error handling in the function pcideviceremove. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the accel/ivpu components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the accel/ivpu components in the Linux operating system’s kernel is related to improper locking of resources in the ivpudevinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has released a new version which addresses the vulnerabilities. Vulnerability Details CVEID:CVE-2024-45296 DESCRIPTION: pillarjs Path-to-RegExp is vulnerable...

The vulnerabilities of the s390/dasd components of the Linux operating system’s kernel, which allow a hacker to trigger a service failure

The vulnerability of the s390/dasd components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE-SU-2024:4036-1 Security update for httpcomponents-client, httpcomponents-core

This update for httpcomponents-client, httpcomponents-core fixes the following issues: httpcomponents-client: - Update to version 4.5.14 HTTPCLIENT-2206: Corrected resource de-allocation by fluent response objects. HTTPCLIENT-2174: URIBuilder to return a new empty list instead of unmodifiable...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of components related to DRM, AMD, and display in the Linux operating system is associated with a memory corruption in the dpdscclockenread function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Malicious code in galaktika-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9bbc46888ec54d0f044dbb94a3b9d6dfd27c7279fcfd31387eb82580eaa972c The OpenSSF Package Analysis project identified 'galaktika-components' @ 0.1.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-10747 Malicious code in galaktika-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9bbc46888ec54d0f044dbb94a3b9d6dfd27c7279fcfd31387eb82580eaa972c The OpenSSF Package Analysis project identified 'galaktika-components' @ 0.1.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-10741 Malicious code in galaktika-components-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 671c7461688fbe5d0af479ac40ecd1b4e4c79918ca524fc0c26608fd8b2dea9a The OpenSSF Package Analysis project identified 'galaktika-components-test' @ 0.1.148 npm as malicious. It is considered malicious because: - Th...

Malicious code in galaktika-components-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 671c7461688fbe5d0af479ac40ecd1b4e4c79918ca524fc0c26608fd8b2dea9a The OpenSSF Package Analysis project identified 'galaktika-components-test' @ 0.1.148 npm as malicious. It is considered malicious because: - Th...

MAL-2024-10776 Malicious code in react-pro-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e36b1f84a78fdd75413789d169ba2770aee6218073cb5a52d7ce2997b7684a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-pro-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e36b1f84a78fdd75413789d169ba2770aee6218073cb5a52d7ce2997b7684a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerability of the Cluster component: General database management systems like MySQL Cluster and their components; FTS database management system like Oracle MySQL Server, which allows attackers to cause service interruptions.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster and their components like the Server component: The Oracle MySQL Server component exists due to incorrect validation of input data in these components. Exploiting this vulnerability can allow an attacke...

The vulnerability of components related to DRM/i915/gt in Linux kernel allows a hacker to induce a service failure.

The vulnerability of DRM/i915/gt components in the Linux operating system is related to an achievable exploit. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerabilities of the s390/zcrypt components of the Linux operating system’s kernel allow attackers to gain elevated privileges within the system.

The vulnerability of the s390/zcrypt components in Linux operating systems is related to errors that occur after liberation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

The vulnerability of the component set in the full stack for rapid development of the Filament PHP framework Laravel, related to insecure resource initialization, allows attackers to exploit it to disclose sensitive information.

The vulnerability of the component set of the full stack for the accelerated development of the Filament PHP framework Laravel is related to an insecure initialization of a resource, allowing a malicious actor to exploit this to disclose sensitive information...