CVE-2024-34158 vulnerabilities

Vulnerabilities for packages: grafana-mimir, aws-flb-kinesis-fips, harbor, grafana-operator, kiam, grpc-health-probe-fips, kube-rbac-proxy, hubble-ui, vt-cli, minify-fips, trivy, apache-beam-java-sdk, kine, cloudnative-pg-fips, nri-kafka, grafana-agent-operator, prometheus-adapter, ghaudit, sbomq...

CVE-2024-34156 vulnerabilities

Vulnerabilities for packages: grafana-mimir, aws-flb-kinesis-fips, harbor, grafana-operator, kiam, grpc-health-probe-fips, kube-rbac-proxy, hubble-ui, vt-cli, minify-fips, trivy, apache-beam-java-sdk, kine, cloudnative-pg-fips, nri-kafka, grafana-agent-operator, prometheus-adapter, ghaudit, sbomq...

CVE-2024-34155 vulnerabilities

Vulnerabilities for packages: grafana-mimir, aws-flb-kinesis-fips, harbor, grafana-operator, kiam, grpc-health-probe-fips, kube-rbac-proxy, hubble-ui, vt-cli, minify-fips, trivy, apache-beam-java-sdk, kine, cloudnative-pg-fips, nri-kafka, grafana-agent-operator, prometheus-adapter, ghaudit, sbomq...

ROS-20240906-02

Vulnerability of the kmemcachedestroy function of the lib/listdebug.c library of the Linux kernel is related to a buffer overrun. is related to an operation exceeding the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2024-39338, CVE-2024-4068, CVE-2021-23727)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. The update addresses these issues. Vulnerability Details CVEID:CVE-2024-39338 DESCRIPTION: Axios is vulnerable to server-side request forgery, caused by a flaw...

Debian dla-3870 : python-oslo.utils-doc - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3870 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3870-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3871-1] cinder security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3871-1 [email protected] https://www.debian.org/lts/security/ Thomas Goirand September 05, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3870-1] python-oslo.utils new upstream release

------------------------------------------------------------------------- Debian LTS Advisory DLA-3870-1 [email protected] https://www.debian.org/lts/security/ Thomas Goirand September 05, 2024 https://wiki.debian.org/LTS -...

CVE-2024-34641

Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers to enable NFC configuration...

CVE-2024-34641

CVE-2024-34641 relates to Samsung Android devices where the FeliCaTest component improperly exports an Android application component. This allows local attackers to enable NFC configuration. Affected software is FeliCaTest prior to the SMR Sep-2024 Release 1. The issue's root cause is improper co...

CVE-2024-34641

Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers to enable NFC configuration...

Security Bulletin: Vulnerabilities in IBM WebSphere Application Server and WebSphere Application Server Liberty affect IBM Watson Explorer (CVE-2024-22354)

Summary IBM WebSphere Application Server and IBM WebSphere Application Server Liberty is used by IBM Watson Explorer. IBM Watson Explorer has addressed the applicable CVE CVE-2024-22354. Vulnerability Details CVEID:CVE-2024-22354 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM...

application management tools Flatpak Output Special Elements Confidential Data Compromise

The vulnerability of the application management tools and Flatpak environments is related to improper elimination of special elements at the output stage, which are used by lower-level components. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromi...

UBUNTU-CVE-2024-45617

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to...

PT-2024-26060 · Google · Android

Name of the Vulnerable Software and Affected Versions: FeliCaTest versions prior to SMR Sep-2024 Release 1 Description: The issue allows local attackers to enable NFC configuration due to improper export of Android application components. Recommendations: For versions prior to SMR Sep-2024 Releas...

Malware in @mp-ss-promotions-lib/components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @costs-components-ui/costs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @costs-components-ui/costs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece207d1ff381cbf6348d88e14e6f00be9e5e0dfb7a42589cdc2bbb55de054e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8052 Malicious code in @costs-components-ui/costs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece207d1ff381cbf6348d88e14e6f00be9e5e0dfb7a42589cdc2bbb55de054e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20240828-07

A vulnerability in the ice component of the Linux operating system kernel is related to the rapid removal and launch of VF Commit. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the kmalloc function in the iouring component of the Linux...