CVE-2024-34394 libxmljs2 namespaces type confusion RCE

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes XmlNode::getlocalnamespaces on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code...

CVE-2024-34392 libxmljs namespaces type confusion RCE

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes wrapxmlNodensDefget on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution...

Malicious code in clistsy-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d90d0caac26d33fe35373881cd3af29619f9941a50edf7def106fb9a4f2243f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1319 Malicious code in clistsy-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d90d0caac26d33fe35373881cd3af29619f9941a50edf7def106fb9a4f2243f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-25853 · Libxmljs · Libxmljs

Name of the Vulnerable Software and Affected Versions: libxmljs affected versions not specified Description: The issue is related to a type confusion vulnerability that occurs when parsing a specially crafted XML. This happens when the namespaces function is invoked on a grand-child of a node tha...

PT-2024-25855 · Libxmljs2 · Libxmljs2

Name of the Vulnerable Software and Affected Versions: libxmljs2 affected versions not specified Description: The issue is related to a type confusion vulnerability that occurs when parsing a specially crafted XML. This happens when the namespaces function is invoked on a grand-child of a node th...

CVE-2024-29010

CVE-2024-29010 affects SonicWall GMS (Virtual Appliance/Windows) – versions 9.3.4 and earlier. The issue resides in the ECM URL endpoint’s XML processing, where insufficient XML External Entity (XXE) handling can lead to disclosure of sensitive information. Affected component: ECM Policy XML proc...

DEBIAN-CVE-2024-27077

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: fix a memleak in v4l2m2mregisterentity The entity-name i.e. name is allocated in v4l2m2mregisterentity but isn't freed in its following error-handling paths. This patch adds such deallocation to prevent memle...

UBUNTU-CVE-2024-27077

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: fix a memleak in v4l2m2mregisterentity The entity-name i.e. name is allocated in v4l2m2mregisterentity but isn't freed in its following error-handling paths. This patch adds such deallocation to prevent memle...

MAL-2024-1320 Malicious code in grylls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9770d42f49225e25b65dff54acc2ca5a625076784e40ae656541b46fb085ab36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Debian dla-3805 : libqt5concurrent5 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3805 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3805-1 [email protected]...

SonicWALL GMS 安全漏洞

SonicWALL GMS is a global management system from SonicWALL, Inc. a powerful and intuitive solution for organizations, distributed enterprises, and service providers to centrally manage and rapidly deploy SonicWall Firewall, Anti-Spam, Backup and Recovery, and Secure Remote Access solutions. A...

GMS ECM multiple vulnerabilities

SonicWall GMS Virtual Appliance, Windows - 9.3.4 and earlier versions are vulnerable to the following security issues.1 CVE-2024-29010 - GMS ECM Policy XML External Entity Processing Information Disclosure Vulnerability.The XML document processed in the GMS ECM endpoint is vulnerable to XML...

expat: XML Entity Expansion

An XML Entity Expansion flaw was found in libexpat. This flaw allows an attacker to cause a denial of service when there is an isolated use of external parsers...

MAL-2024-1310 Malicious code in vue2-amis-custom-widget-k (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7995bc4ce2d3fd487e75baadf8d21d894607e1f79d0142c3aed2ed6c5bf88136 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-22669 · Sonicwall · Gms

Name of the Vulnerable Software and Affected Versions: GMS versions 9.3.4 and earlier Description: The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity XXE injection, potentially resulting in the disclosure of sensitive information. This issue could allow...

MAL-2024-1307 Malicious code in ethutility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d7a11441aebc92f1c803484e58720849e1bf6d75cf48b0df69ecc83fa25453 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-transactions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31d30dcd73ba06a4962c3e3b0419d5864aa9f93f1dcf516e1830eafa40f44ab7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 40 : python2.7 (2023-de99cdb793)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-de99cdb793 advisory. Automatic update for python2.7-2.7.18-35.fc40. Changelog Fri Oct 6 2023 Lumr Balhar - 2.7.18-35 - Fix for CVE-2022-48565 Resolves: rhbz2240062 Fri Oct 6 2023...

RHEL 6 / 7 : rh-java-common-lucene5 (RHSA-2017:3452)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:3452 advisory. Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly an...