PT-2024-40974 · Crates.Io · Xous

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so the information cannot be determined. Description: The issue concerns the as slice and as slice mut functions, which are considered unsound. This is because any pointer, regardless of its bit...

OESA-2024-2579 undertow security update

Java web server using non-blocking IO Security Fixes: Description: Product Security received a report that Undertow might incorrectly re-use an HTTP request header value from a previous stream for a request associated with a subsequent stream on the same HTTP/2 connection. The issue is linked to...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential context UAFs CVE-2023-52913 In the Linux kernel, the following vulnerability has been resolved: dm-crypt, dm-verity: disable tasklets CVE-2024-26718 In the Linux kernel, the following...

MAL-2024-11915 Malicious code in ifood2-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a15f07f3dda7d132a00d57e04e31bc1c982857fc28d86ec6934974c3ad314723 The OpenSSF Package Analysis project identified 'ifood2-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in ifood2-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a15f07f3dda7d132a00d57e04e31bc1c982857fc28d86ec6934974c3ad314723 The OpenSSF Package Analysis project identified 'ifood2-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: IBM Operational Decision Manager for Nov 2024 - Multiple CVEs addressed

Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-47554...

Malicious code in ifood-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e523e57e2b34793b9a65626a1c74932d6b6b5339b658b78187d5fcb22f2563e The OpenSSF Package Analysis project identified 'ifood-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

ifood2-github-io (9.9.9) potentially affected by unknown CVE via ifood-github-io (9.9.9)

ifood-github-io NPM version 9.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ifood-github-io and may be impacted: - ifood2-github-io 9.9.9 Source cves: unknown CVE Source advisory: OSV:MAL-2024-11879...

MAL-2024-11879 Malicious code in ifood-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e523e57e2b34793b9a65626a1c74932d6b6b5339b658b78187d5fcb22f2563e The OpenSSF Package Analysis project identified 'ifood-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2024-55998 WordPress Popup Surveys & Polls for WordPress (Mare.io) plugin <= 1.36 - Settings Change vulnerability

Missing Authorization vulnerability in dusthazard Popup Surveys & Polls for WordPress Mare.io allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Surveys & Polls for WordPress Mare.io: from n/a through 1.36...

The vulnerability of the microprogrammed routing software of I-O Data Device UD-LT1 and UD-LT1/EX arises from the lack of measures to neutralize specific elements, allowing attackers to circumvent existing security restrictions.

The vulnerability of the microprogrammed routing software of I-O Data Device UD-LT1 and UD-LT1/EX exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute arbitrary commands...

PT-2024-17709 · Velocidex · Velocidex Winpmem

Name of the Vulnerable Software and Affected Versions: Velocidex WinPmem versions below 4.1 Description: The issue allows a user space program to trick the driver into writing a 0 into any chosen memory location by using an IO Control. In conjunction with information leakage from the WinPmem...

WordPress Popup Surveys & Polls for WordPress (Mare.io) plugin <= 1.36 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Popup Surveys & Polls for WordPress Mare.io versions = 1.36...

OESA-2024-2558 apache-commons-io security update

Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Security Fixes: Uncontrolled Resource Consumption vulnerability in...

python: Unbounded memory buffering in SelectorSocketTransport.writelines()

A flaw was found in Python. In certain configurations, the asyncio.SelectorSocketTransport.writelines method fails to signal the protocol to clear the write buffer when it approaches capacity. Because of this, protocols would not periodically drain the write buffer, potentially leading to a denia...

smb: client: fix OOBs when building SMB2_IOCTL request

...

Image Access Scan2Net 安全漏洞

Image Access Scan2Net is a scanning software from Image Access Germany. A security vulnerability exists in Image Access Scan2Net versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier, which originates from an authenticated attacker who can perform SQL injection by accessing the...

kernel: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race

In the Linux kernel, the following vulnerability has been resolved: blk-rq-qos: fix crash on rqqoswait vs. rqqoswakefunction race We're seeing crashes from rqqoswakefunction that look like this: BUG: unable to handle page fault for address: ffffafe180a40084 PF: supervisor write access in kernel...

GO-2024-3315 CVE-2024-46455 in github.com/Unstructured-IO/unstructured

CVE-2024-46455 in github.com/Unstructured-IO/unstructured...

Malicious code in openpass-sample-sites-piano-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f0304f3f60bf5d349bb9e70fe90a204d906a2213b87d66e41afe3b0c1ddc8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...