1560 matches found
Malicious code in evocateur_libnpmpublisher (npm)
--- -= Per source details. Do not edit below this line.=-...
OPENSUSE-SU-2024:14564-1 lxd-5.21.1-2.1 on GA media
These are all security issues fixed in the lxd-5.21.1-2.1 package on the GA media of openSUSE Tumbleweed...
Malicious code in chime-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11293 Malicious code in admin-upload-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11261 Malicious code in @cawraytestorg/packagetest (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11244 Malicious code in nextcloud2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0849e0cda274c845158689c282bae36877b598c0a3e458b2e44243c3acd542d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-40548 affecting package shim for versions less than 15.8-5
CVE-2023-40548 affecting package shim for versions less than 15.8-5. An upgraded version of the package is available that resolves this issue...
CVE-2024-25431 affecting package fluent-bit for versions less than 3.1.9-1
CVE-2024-25431 affecting package fluent-bit for versions less than 3.1.9-1. A patched version of the package is available...
OPENSUSE-SU-2024:14554-1 oras-1.2.1-1.1 on GA media
These are all security issues fixed in the oras-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
[SECURITY] [DLA 3976-1] tgt security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3976-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 30, 2024 https://wiki.debian.org/LTS -...
CVE-2024-11706 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-11693
The executable file warning was not presented when downloading .library-ms files. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...
CVE-2024-10978 affecting package postgresql for versions less than 16.5-1
CVE-2024-10978 affecting package postgresql for versions less than 16.5-1. An upgraded version of the package is available that resolves this issue...
MGASA-2024-0358 Updated mpg123 packages fix security vulnerability
An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution may not be dismissed. The complexity required to exploit this fla...
RockyLinux 8 : kernel-rt (RLSA-2024:8870)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:8870 advisory. kernel: net/bluetooth: race condition in conninfomin,maxageset CVE-2024-24857 kernel: dmaengine: fix NULL pointer in channel unregistration function...
Malicious code in fedlearnre (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 cbc005ae139aa93da4c4f580aaef573edfee5f079036ff5989a8974a15d3cb14 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in music-source-separation (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a4aa4c5d893735fb71d4983056b6d254f087a4f5c82df6976e2efdab41f0c9f2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-11544 Malicious code in byted-flex (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f7c46f02d189ba471aba10b985193a2e0476f4f7f9f6e068ddf3fe79c2088ea1 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in apa-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 361503e28f7ed26889dd3b64e15bd3702d16e1c57dcc009a2cd1e0a7303a85aa The OpenSSF Package Analysis project identified 'apa-components' @ 6.1.3 npm as malicious. It is considered malicious because: - The package...