KLA78283 Multiple vulnerabilities in Apache Tomcat

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability can be exploited remotely...

Malicious code in crypto-latest (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11337 Malicious code in crypto-latest (npm)

--- -= Per source details. Do not edit below this line.=-...

PostgreSQL: Multiple Vulnerabilities

Background PostgreSQL is an open source object-relational database management system. Description Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaroun...

OpenJDK: Multiple Vulnerabilities

Background OpenJDK is an open source implementation of the Java programming language. Description Multiple vulnerabilities have been discovered in OpenJDK. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

Critical vulnerabilities in SICK InspectorP61x, InspectorP62x and TiM3xx

Multiple critical vulnerabilities were found in the SICK products InspectorP61x, InspectorP62x and TiM3xx. If exploited, this potentially allows an attacker to impact availabiltiy, integrity and confidentaility of the products. It is strongly recommended to upgrade the InspectorP61x, InspectorP62...

hull.js Code Injection Vulnerability

Versions of the library from 0.2.2 to 1.0.9 are vulnerable to the arbitrary code execution due to unsafe usage of new Function... in the module that handles points format. Applications passing the 3rd parameter to the hull function without sanitising may be impacted. The vulnerability has been...

MAL-2024-11002 Malicious code in secure-fetch-utils-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c66dff7a321aed95e4731350eec61896cd1851d384cb7528dffa45045bbfcaf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

V8-FRESHNESS Outdated dependency on V8 found (see details)

Outdated dependency on V8 found see policy. Please update to the latest beta, stable, or extended stable versions...

Malicious code in web_enhance_sap-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1929ef8619831ff03c7cb7059585b7c1004f18089f8a438ea4b45648363dc924 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10887 Malicious code in web_enhance_sap-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1929ef8619831ff03c7cb7059585b7c1004f18089f8a438ea4b45648363dc924 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uuid-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30f88a43630b6ef5d7da8f6ba0cda55412b61b9b682d32bae81951e545ce6915 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10873 Malicious code in uuid-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30f88a43630b6ef5d7da8f6ba0cda55412b61b9b682d32bae81951e545ce6915 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-33325 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based versions up to 131.0.2903.48 Description: The Microsoft Edge browser, specifically the Chromium-based version, is affected by a spoofing issue that can be remotely exploited. Users should upgrade Microsoft Edge t...

osbuild-composer security update

118-2.0.1 - Simplify repository names JIRA: OLDIS-35893 118-2 - Ensure build on latest golang: CVE-2024-34156...

PT-2024-34956 · Figoli Quinn & Associates · Figoli Quinn & Associates Mobile Kiosk

Name of the Vulnerable Software and Affected Versions: Figoli Quinn & Associates Mobile Kiosk versions n/a through 1.3.0 WordPress Mobile Kiosk Plugin version 1.3.0 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site...

PT-2024-34799 · Unknown · Microkid Custom Author Url

Name of the Vulnerable Software and Affected Versions: Microkid Custom Author URL versions n/a through 2.0.1 Description: A Cross-Site Request Forgery CSRF vulnerability allows Stored XSS. This issue can be exploited to perform malicious actions. Users are advised to update to the latest version ...

PT-2024-34935 · Unknown · Keymaster Chord Notation Free

Name of the Vulnerable Software and Affected Versions: Keymaster Chord Notation Free versions 1.0.2 and earlier Description: The issue affects the Keymaster Chord Notation Free plugin, allowing Stored XSS due to improper neutralization of input during web page generation. This can lead to the...

PT-2024-34760 · Clyp · Clyp

Name of the Vulnerable Software and Affected Versions: Clyp versions 1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This is a critical reflected XSS vulnerability. Users are urged to...

PT-2024-34974 · Unknown · Community Yard Sale

Name of the Vulnerable Software and Affected Versions: Community Yard Sale versions 1.1.11 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicio...