538 matches found
Malicious code in Bе.Vlаanderen.Basisregisters.DataDog.Tracing.Microsoft (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4424 Malicious code in Bе.Vlаanderen.Basisregisters.DataDog.Tracing.Microsoft (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2328 Malicious code in eslint-plugin-datadog (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eslint-plugin-datadog (npm)
--- -= Per source details. Do not edit below this line.=-...
New Malware Targets Exposed Docker APIs for Cryptocurrency Mining
Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...
CVE-2024-37891 vulnerabilities
Vulnerabilities for packages: py3-urllib3, kubeflow-katib, request-1276, superset, reflex, airflow, checkov, az, py3-cassandra-medusa, kubeflow-jupyter-web-app, mlflow, dask-gateway, ggshield, nemo, py3.13-scanner-test-libraries, barman, kubeflow-volumes-web-app, k8s-sidecar,...
GHSA-87M9-RV8P-RGMG vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-fips, opentelemetry-collector, spicedb, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib...
CVE-2024-36129 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, opentelemetry-collector-fips, opentelemetry-collector...
GHSA-C74F-6MFW-MM4V vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, opentelemetry-collector-fips, opentelemetry-collector...
GHSA-V9HF-5J83-6XPP vulnerabilities
Vulnerabilities for packages: py3-pymysql...
CVE-2024-36039 vulnerabilities
Vulnerabilities for packages: py3-pymysql...
CVE-2024-35195 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, request-1276, superset, reflex, airflow, checkov, az, py3-cassandra-medusa, kubeflow-jupyter-web-app, mlflow, ggshield, kubeflow-volumes-web-app, k8s-sidecar, apache-beam-python-3.11-sdk, patroni, kubeflow-pipelines-visualization-server,...
Security Bypass
datadog/dd-trace is vulnerable to Security Bypass. The vulnerability is due to insufficient constraint on the ddtrace.requestinithook by the openbasedir INI directive, which allows an attacker to bypass the openbasedir INI directive...
GitLab 13.7 < 14.0.9 / 14.1 < 14.1.4 / 14.2 < 14.2.2 (CVE-2021-22260)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions...
datadog/dd-trace Circumvents open_basedir INI directive
datadog/dd-trace versions 0.30.0 prior to 0.30.2 are affected by a security and stability issue outlined in PR 579. This pull request ensures that the ddtrace.requestinithook remains bound by the openbasedir INI directive, effectively addressing potential vulnerabilities related to openbasedir...
GHSA-QVGG-R6RQ-VWFX datadog/dd-trace Circumvents open_basedir INI directive
datadog/dd-trace versions 0.30.0 prior to 0.30.2 are affected by a security and stability issue outlined in PR 579. This pull request ensures that the ddtrace.requestinithook remains bound by the openbasedir INI directive, effectively addressing potential vulnerabilities related to openbasedir...
PT-2024-40441 · Datadog · Datadog/Dd-Trace
Name of the Vulnerable Software and Affected Versions: datadog/dd-trace versions 0.30.0 through 0.30.1 Description: The issue concerns a security and stability problem where the ddtrace.request init hook was not properly bound by the open basedir INI directive, potentially leading to...
GHSA-MR82-8J83-VXMV vulnerabilities
Vulnerabilities for packages: datadog-agent...