130 matches found
CVE-2024-31178
Out-of-bounds Read vulnerability in Open Networking Foundation ONF libfluid libfluidmsg module. This vulnerability is associated with program routine fluidmsg::of13::TableFeaturePropNextTables::unpack. This issue affects libfluid: 0.1.0...
Malicious code in lnx-integrity-check-prop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a2be1591ee055bb001b6d945290d1fd8e9d367bd1d7e1b96b0ab70031541cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7055 Malicious code in lnx-integrity-check-prop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a2be1591ee055bb001b6d945290d1fd8e9d367bd1d7e1b96b0ab70031541cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-52678 drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Confirm list is non-empty before utilizing listfirstentry in kfdtopology.c Before using listfirstentry, make sure to check that list is not empty, if list is empty return -ENODATA. Fixes the below:...
Rocky Linux 8 : nodejs:10 (RLSA-2021:0548)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:0548 advisory. - Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like ://:@::/...
Rocky Linux 8 : nodejs:12 (RLSA-2020:4272)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4272 advisory. - Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like ://:@::/...
SUSE CVE-2020-8116
Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...
alba-prop.co.jp Cross Site Scripting vulnerability OBB-3750860
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-5196
Mattermost vulnerability CVE-2023-5196 involves an uncontrolled resource consumption DoS caused by failure to enforce character limits in all notification props. Attackers can send an overly long value for a notification_prop, potentially exhausting server resources and taking services temporaril...
PT-2023-27582 · Red Hat · Red Hat Amq Broker
Name of the Vulnerable Software and Affected Versions: Red Hat AMQ Broker affected versions not specified Description: A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR. However, these...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from improper encryption of the buildPropFile of the filesystem.go component, which can be exploited by an attacker to elevate privileges...
SUSE CVE-2004-1188
The pnmgetchunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLESIZE, which causes a read operation with a negative length that leads to a buffer overflow via 1 RMFTAG, 2 DATATAG,...
RHEL 7 : rh-nodejs12-nodejs (RHSA-2020:5086)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5086 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
RHEL 7 : rh-nodejs10-nodejs (RHSA-2021:0521)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0521 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
Malicious code in babel-plugin-transform3react-remove-prop-t8pes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00b3d70f4d8d97db890539838285400fdd678a273c24916e49a3ec846ae4f7af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1408 Malicious code in babel-plugin-transform3react-remove-prop-t8pes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00b3d70f4d8d97db890539838285400fdd678a273c24916e49a3ec846ae4f7af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-V42Q-78W8-8FCC set-deep-prop Prototype Pollution
All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...
