Intel Chipset Device Software May 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Chipset Device Software, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has...

Malicious code in @cloee/fetchs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ddd287e759985428de17d0c1ee45f25e31d209edfcf1c1f251d31b20d582622 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in world-id-onchain-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23beae0d76f8d9d9ccbbe5079e8186b31119aa5d9ad66fe8fc49713db22dc4d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-flag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3033329573120de896d630b7943ea5d68c1dd50a077ee370f8892df7d7460d47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wf-dbd-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0298d6396635472198baea5a751b125cd374bce845178bac3e4738ec1c2c73ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25fc9c1c12e5d675118a2fac283b84b5f05476e9a35c4172ef1b3059da075e12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-cdp-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 194141a6bf1b4fd7550a2450db187a08697b59b034fc2b366d8e171b728b48a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-37825

An issue in EnvisionWare Computer Access & Reservation Control SelfCheck v1.0 fixed in OneStop 3.2.0.27184 Hotfix May 2024 allows unauthenticated attackers on the same network to perform a directory traversal...

CVE-2024-37825

CVE-2024-37825 concerns EnvisionWare Computer Access & Reservation Control SelfCheck v1.0. The Red Hat, NVD, CVE lists and related advisories confirm an unauthenticated directory traversal vulnerability that can be triggered by attackers on the same network. The issue is tied to SelfCheck v1.0 an...

CVE-2024-37825

An issue in EnvisionWare Computer Access & Reservation Control SelfCheck v1.0 fixed in OneStop 3.2.0.27184 Hotfix May 2024 allows unauthenticated attackers on the same network to perform a directory traversal...

Malicious code in desainnew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01bf842f0425d57bc046f2dfe5ca780425c5c598cddf38891bcb48821a75920a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-package-random-name-for-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1f87eff60d8591d10e2be79afe5011ea9f63f823c7a014281e4e21f0da76eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-27513 · Ricoh · Ricoh Streamline Nx Pc Client

Name of the Vulnerable Software and Affected Versions: Ricoh Streamline NX PC Client affected versions not specified Description: A use of potentially dangerous function issue exists in the software. If this issue is exploited, files on the PC where the product is installed may be altered...

Malicious code in logooo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f609b1731a83d9360a1399bb75931accaed83e36b964fd2778b16388a9ddd520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Operational Decision Manager for May 2024 - Multiple CVEs addressed

Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-22201...

Malicious code in atoz-attendance-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff390162beebf06ba564766a3ffc0a06c520792994c16cba3ea0d97ea64d1f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blueprint-org-planning-app-adp-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ce904784ecde9ca4b860730c45d27dbca01912380066fe5415b10d3f17f0af8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bootstrap-npm-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fd1dc66e2c97cb20814b56fc5ff776a96f0851f09647f1cef4cfb305ec2b3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-37020 HP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows

Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities...

Intel 2024.2 IPU - BIOS May 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Processors, which might allow information disclosure and/or denial of service. Intel is releasing microcode updates to mitigate the potential vulnerabilities. Intel has released updates to mitigate the potential...