Malicious code in @conundra/components-frontend (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11263 Malicious code in @conundra/components-frontend (npm)

--- -= Per source details. Do not edit below this line.=-...

Tenable Security Center < 6.5.0 Multiple Vulnerabilities (TNS-2024-19)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-19 advisory. - Security Center leverages third-party software to help provide underlying...

Linux DRM MSM DoS

The vulnerability of DRM/SMM components in the Linux operating system is related to the lack of memory release after the effective lifespan of these components. Exploiting this vulnerability can allow a hacker to cause a service failure...

Linux kernel TCP DoS

The vulnerability of TCP components in Linux operating systems is related to the operation of data out of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

s390/cio DoS

The vulnerability of the s390/cio components of the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel mm/slab Heap Buffer Overflow DoS

The vulnerability of the mm/slab components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux PowerPC System Failure

The vulnerability of the powerpc/32 kernel components of the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

riscv and bpf components

The vulnerability of riscv and bpf components in Linux operating systems is related to the dereferencing of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Media components Microsoft Edge Google Chrome Data Compromise

The vulnerability of the Media components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise privacy, integrity, and accessibility through a specially crafted HTML page...

crystal-toolkit (2020.9.28), dlg-lowpass-components (>=0.1.5, <=0.2.0) +9 more potentially affected by unknown CVE via pyfftw (>=0.12.0, <=0.13.1)

pyfftw PYPI version =0.12.0, =0.1.5, =24.5.1, =0.8.0, =0.1.0, =0.10.0, =0.0.2, =1.0.2, =2.0.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-PYFFTW-8446347...

Race Condition Attacks against LLMs

These are two attacks against the system components surrounding LLMs: We propose that LLM Flowbreaking, following jailbreaking and prompt injection, joins as the third on the growing list of LLM attack types. Flowbreaking is less about whether prompt or response guardrails can be bypassed, and mo...

CVE-2024-35451

LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF...

Number withdrawal

Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony, Inc. This CVE number has been withdrawn...

CVE-2024-35451: Server-Side Request Forgery (SSRF)

LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF...

XML External Entity (XXE) Injection

HAPI FHIR is vulnerable to XML External Entity XXE Injection. The vulnerability is due to insecure XML parsing by HAPI FHIR, specifically within the XSLT parsing components, which improperly handle external entity references in XML files. It allows attackers to inject malicious XML content, such ...

CVE-2024-46939 Game Extension Engine Path Traversal Vulnerability

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

CVE-2024-46939 Game Extension Engine Path Traversal Vulnerability

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

Malware in react-pro-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in react-domain-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c514bbaadbc88d9b8e95127869e308b2cc8e239d85380ab86c3c7c49706fb891 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...