225 matches found
MAL-2024-10380 Malicious code in @isfe-common/testing-constants (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4203c75b7ee03f443c2944645689ffff3aefae76e13ac2f7be00545b63c27664 The OpenSSF Package Analysis project identified '@isfe-common/testing-constants' @ 9.2.9 npm as malicious. It is considered malicious because: -...
The vulnerability of Dell Alienware Command Center’s software lies in the insufficient definition of symbolic constants, allowing a hacker to trigger a service failure.
The vulnerability of Dell Alienware Command Center’s software is related to the insufficient definition of symbolic constants. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Malicious code in gp-constants (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2432 Malicious code in gp-constants (npm)
--- -= Per source details. Do not edit below this line.=-...
RLSA-2024:3275 Moderate: python-dns security update
The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode. Security Fixes: dnspython: denial of service in stub resolver CVE-2023-29483 For more details about th...
RHEL 8 : python-dns (RHSA-2024:3275)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:3275 advisory. The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by...
ALSA-2024:3275 Moderate: python-dns security update
The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode. Security Fixes: dnspython: denial of service in stub resolver CVE-2023-29483 For more details about th...
Moderate: python-dns security update
The python-dns package contains the dnslib module that implements a DNS client and additional modules that define certain symbolic constants used by DNS, such as dnstype, dnsclass and dnsopcode. Security Fixes: dnspython: denial of service in stub resolver CVE-2023-29483 For more details about th...
Malicious code in abcotv-constants (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aecde97eb6bd30d0ab5c8787d1bd2f6d5fe38f5078d015135b8e267e5558b89e The OpenSSF Package Analysis project identified 'abcotv-constants' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in ouramerica-constants (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5e8ad6206cb55fdcb549168be1855e019bdc7745420d9b12074c0d682e66d50 The OpenSSF Package Analysis project identified 'ouramerica-constants' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
CVE-2024-1346
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants...
CVE-2024-1346
Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants...
LaborOfficeFree Security Vulnerability
LaborOfficeFree is a free Turnos management and Presencia control software from LaborOfficeFree. A security vulnerability exists in LaborOfficeFree version 19.10 that originates from a vulnerability that allows an attacker to calculate the root password of a MySQL database using two constants...
[SECURITY] Fedora 38 Update: kernel-headers-6.7.3-100.fc38
Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...
PT-2023-32283 · WordPress · System Dashboard
Name of the Vulnerable Software and Affected Versions: System Dashboard plugin for WordPress versions up to, and including, 2.8.7 Description: The issue allows unauthorized access to data due to a missing capability check on the sd constants function hooked via an AJAX action. This makes it...
Missing important check in getOwnerAddress() function in DNSClaimChecker.sol
Lines of code Vulnerability details Impact getOwnerAddress function used in DNSClaimChecker.sol is missing important check on the type and class of the records. Also this getOwnerAddress function is used in DNSRegistar.sol claim function to claim a name using the given proofs Since there are chec...
RUSTSEC-2023-0035 Adverserial use of `make_bitflags!` macro can cause undefined behavior
The macro relied on an expression of the form Enum::Variant always being a variant of the enum. However, it may also be an associated integer constant, in which case there's no guarantee that the value of said constant consists only of bits valid for this bitflag type. Thus, code like this could...
Authentication Bypass
farmhaystack is vulnerable to Authentication Bypass. The vulnerability exists in docker-compose.yml due to the use of hard-coded, security-relevant constants which allows an attacker to make changes in the annotation process...
Use of hard-coded, security-relevant constants in deepset-ai/haystack
Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack in version 1.15.0 and prior. A patch is available at commit 5fc84904f198de661d5b933fde756aa922bf09f1...