MAL-2024-11261 Malicious code in @cawraytestorg/packagetest (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11244 Malicious code in nextcloud2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0849e0cda274c845158689c282bae36877b598c0a3e458b2e44243c3acd542d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-40548 affecting package shim for versions less than 15.8-5

CVE-2023-40548 affecting package shim for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...

CVE-2024-25431 affecting package fluent-bit for versions less than 3.1.9-1

CVE-2024-25431 affecting package fluent-bit for versions less than 3.1.9-1. A patched version of the package is available...

OPENSUSE-SU-2024:14554-1 oras-1.2.1-1.1 on GA media

These are all security issues fixed in the oras-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] [DLA 3976-1] tgt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3976-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 30, 2024 https://wiki.debian.org/LTS -...

CVE-2024-11706 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2024-11693

The executable file warning was not presented when downloading .library-ms files. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...

CVE-2024-10978 affecting package postgresql for versions less than 16.5-1

CVE-2024-10978 affecting package postgresql for versions less than 16.5-1. An upgraded version of the package is available that resolves this issue...

MGASA-2024-0358 Updated mpg123 packages fix security vulnerability

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution may not be dismissed. The complexity required to exploit this fla...

RockyLinux 8 : kernel-rt (RLSA-2024:8870)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:8870 advisory. kernel: net/bluetooth: race condition in conninfomin,maxageset CVE-2024-24857 kernel: dmaengine: fix NULL pointer in channel unregistration function...

MAL-2024-11544 Malicious code in byted-flex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f7c46f02d189ba471aba10b985193a2e0476f4f7f9f6e068ddf3fe79c2088ea1 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in music-source-separation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a4aa4c5d893735fb71d4983056b6d254f087a4f5c82df6976e2efdab41f0c9f2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in fedlearnre (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cbc005ae139aa93da4c4f580aaef573edfee5f079036ff5989a8974a15d3cb14 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in apa-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 361503e28f7ed26889dd3b64e15bd3702d16e1c57dcc009a2cd1e0a7303a85aa The OpenSSF Package Analysis project identified 'apa-components' @ 6.1.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in react-native-community (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mowirie (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in alexablueprintswizard (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-43892 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-43892 affecting package kernel for versions less than 5.15.167.1-1. A patched version of the package is available...

Ubuntu: Security Advisory (USN-7003-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...