GHSA-PQ67-6M6Q-MJ2V vulnerabilities

Vulnerabilities for packages: datadog-agent, jwt-tool, mlflow, az, dask-kubernetes, py3-pip, confluent-docker-utils, kubeflow-jupyter-web-app, superset, py3-pipenv, pypy-3.10, kubeflow-pipelines, airflow, kserve, jupyter-base-notebook, kubeflow-katib, pypy-3.11, ggshield, py3-cassandra-medusa,...

CVE-2024-49588

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-49588

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-49588 Multiple authenticated SQL injections in oracle-sidecar

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

CVE-2024-49588

CVE-2024-49588 affects the Palantir oracle-sidecar component. Affected versions are 0.347.0 through 0.543.0, with multiple endpoints susceptible to SQL injections. The vulnerability is described across several sources as authenticated SQL injection weaknesses in oracle-sidecar, enabling potential...

CVE-2024-49588 Multiple authenticated SQL injections in oracle-sidecar

Multiple endpoints in oracle-sidecar in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections...

PT-2024-33556 · Oracle · Oracle-Sidecar

Name of the Vulnerable Software and Affected Versions: oracle-sidecar versions 0.347.0 through 0.543.0 Description: The issue concerns SQL injections in multiple endpoints. An unauthenticated attacker can compromise data. Recommendations: For versions 0.347.0 through 0.543.0, upgrade the affected...

Palantir sls-oracle-sidecar SQL注入漏洞

Palantir sls-oracle-sidecar is a utility program from Palantir Corporation, USA. A SQL injection vulnerability exists in Palantir sls-oracle-sidecar versions 0.347.0 through 0.543.0, which stems from multiple endpoints that are susceptible to SQL injection attacks...

CVE-2024-44145

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...

CVE-2024-44145

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...

CVE-2024-44145

CVE-2024-44145 affects macOS Sequoia 15, iOS 18, and iPadOS 18. The issue, tied to Sidecar, could allow a physically proximate attacker to bypass the Lock Screen due to a state-management flaw. Apple fixed the vulnerability in the indicated OS versions (Sequoia 15, iOS 18, iPadOS 18) through impr...

CVE-2024-44145

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS version 15, which originated when an attacker with physical access to a Sidecar-enabled macOS device may be able to bypass the lock screen...

GHSA-CX63-2MW6-8HW5 vulnerabilities

Vulnerabilities for packages: py3-pipenv, az, py3-cassandra-medusa, request-1276, kubeflow-katib, airflow, py3.9-setuptools, nemo, superset, nvidia-nsight-compute-13.2, reflex, k8s-sidecar, checkov, nvidia-nsight-compute-13.1...

CVE-2024-6345 vulnerabilities

Vulnerabilities for packages: py3-pipenv, az, py3-cassandra-medusa, request-1276, kubeflow-katib, airflow, py3.9-setuptools, nemo, superset, nvidia-nsight-compute-13.2, reflex, k8s-sidecar, checkov, nvidia-nsight-compute-13.1...

CVE-2024-3651 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow-pipelines-visualization-server, dask-gateway, jwt-tool, ggshield, kubeflow-volumes-web-app, confluent-docker-utils, nvidia-nsight-compute-13.2, kserve, kubeflow-pipelines, py3-pipenv, az, request-1276, checkov, py3-idna, py3-cassandra-medusa,...

GHSA-248V-346W-9CWC vulnerabilities

Vulnerabilities for packages: jwt-tool, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, mlflow, az, checkov, confluent-docker-utils, kubeflow-jupyter-web-app, superset, py3-pipenv, patroni, kubeflow-pipelines, airflow, kubeflow-katib, py3-certifi, py3-cassandra-medusa, reflex,...

CVE-2024-39689 vulnerabilities

Vulnerabilities for packages: jwt-tool, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, mlflow, az, checkov, confluent-docker-utils, kubeflow-jupyter-web-app, superset, py3-pipenv, patroni, kubeflow-pipelines, airflow, kubeflow-katib, py3-certifi, py3-cassandra-medusa, reflex,...

CVE-2024-35195 vulnerabilities

Vulnerabilities for packages: checkov, jwt-tool, patroni, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-jupyter-web-app, az, kubeflow-pipelines, airflow, ggshield, mlflow, py3-cassandra-medusa, reflex, superset, k8s-sidecar, kubeflow-katib,...

GHSA-9WX4-H78V-VM56 vulnerabilities

Vulnerabilities for packages: checkov, jwt-tool, patroni, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-jupyter-web-app, az, kubeflow-pipelines, airflow, ggshield, mlflow, py3-cassandra-medusa, reflex, superset, k8s-sidecar, kubeflow-katib,...