EUVD-2024-37018

Malicious code in bioql PyPI...

K000138850: OpenJDK vulnerabilities CVE-2024-20918, CVE-2024-20925, CVE-2024-20945, CVE-2024-20952, and CVE-2024-20955

Security Advisory Description CVE-2024-20918 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle...

K04553557: Linux nfsd kernel vulnerability CVE-2020-24394

Security Advisory Description In the Linux kernel before 5.7.8, fs/nfsd/vfs.c in the NFS server can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered. CVE-2020-24394 Impact The...

JavaScript template function XSS

The vulnerability of the JavaScript library’s template function for working with arrays like Underscore is related to incorrect code generation practices. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the linux-support-2.6.24-etchnhalf.1 operating system package from the Debian GNU/Linux ecosystem can lead to breaches of the confidentiality, integrity, and accessibility of protected information...

Debian GNU/Linux Data Compromise

The Linux-image-2.6.26-1-openvz-amd64 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotel...

OpenSUSE Data Compromise

The multiple vulnerabilities in the kernel-trace-base-debuginfo package of the OpenSUSE operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Local Compromise Data Compromise

The multiple vulnerabilities in the kernel-headers-2.2.20 package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

OpenSUSE Data Compromise

The multiple vulnerabilities in the wlan-kmp-xen package of the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Local Compromise Data Compromise

The multiple vulnerabilities in the kernel-image-power4-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...

SUSE Linux Enterprise Data Compromise

The multiple vulnerabilities in the xorg-x11-Xprt package of the SUSE Linux Enterprise operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Remote Compromise

The multiple vulnerabilities in the openssh package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality and integrity of protected information. These vulnerabilities can be exploited remotely...

SUSE Linux Enterprise Data Compromise

The vulnerability of the bash-debuginfo package in the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

SUSE Linux Enterprise Data Compromise

The multiple vulnerabilities in the kdebug package of the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...