13 matches found
Malicious code in ilang-47 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8af1a4cf1d638904160508a864179206bed5ea5e71adceb717a93d3cc26e4d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Improper Access Control
Directus is vulnerable to an improper access control vulnerability. The vulnerability is due to a flaw in the file update mechanism, which allows an attacker to modify existing files or upload arbitrary files without authentication, bypassing metadata tracking and evading visibility in the Direct...
CVE-2024-58133
In chainmaker-go aka ChainMaker before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a read-write conflict and panic...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Manager Enterprise Edition CVE-2015-7575
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.7 that is used by Content Manager Enterprise Edition. These issues were disclosed as part of the IBM Java SDK updates in January 2016 and includes the vulnerability commonly referred to as “SLOTH”...
firefox security update
91.11.0-2.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build 91.11.0-2 - Update to 91.11.0 build2 91.11.0-1 - Update to 91.11.0 build1...
Update Rollup 1 for System Center 2016 Orchestrator - Service Provider Foundation
Update Rollup 1 for System Center 2016 Orchestrator - Service Provider Foundation Introduction The Microsoft System Center 2016 Orchestrator - Service Provider Foundation General Availability Update Rollup is available. This update rollup package provides a collection of performance and reliabili...
Microsoft Windows: Turn off Search Companion content file updates
This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincontentfileupdates.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off Search Companion content file updates Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...
MS11-042: Vulnerabilities in Distributed File System could allow remote code execution: June 14, 2011
MS11-042: Vulnerabilities in Distributed File System could allow remote code execution: June 14, 2011 Introduction Microsoft has released security bulletin MS11-042. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...
Update Rollup 4 for System Center 2012 R2 Orchestrator – SPF
Update Rollup 4 for System Center 2012 R2 Orchestrator – SPF This article describes the issues that are fixed in Update Rollup 4 for Microsoft System Center 2012 R2 Orchestrator – Service Provider Foundation. Additionally, this article contains the installation instructions for Update Rollup 4 fo...
MS11-025: Description of the security update for Visual C++ 2005 SP1 Redistributable Package: June 14, 2011
MS11-025: Description of the security update for Visual C++ 2005 SP1 Redistributable Package: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-025. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...
Description of Update Rollup 6 for System Center 2012 - Virtual Machine Manager Server
Description of Update Rollup 6 for System Center 2012 - Virtual Machine Manager Server Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 - Virtual Machine Manager Server. Additionally, this article contains the installation...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-977)
This update for java-170-openjdk fixes the following issues : - Update to 2.6.7 - OpenJDK 7u111 - Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 - S8147771: Construction of static protection...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-976)
This update for java-170-openjdk fixes the following issues : - Update to 2.6.7 - OpenJDK 7u111 - Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 - S8147771: Construction of static protection...