1555 matches found
OPENSUSE-SU-2024:11148-1 libpango-1_0-0-1.48.10-1.3 on GA media
These are all security issues fixed in the libpango-10-0-1.48.10-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11255-1 python-pymisp-doc-2.4.148-2.2 on GA media
These are all security issues fixed in the python-pymisp-doc-2.4.148-2.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13939-1 python-tqdm-bash-completion-4.66.4-1.1 on GA media
These are all security issues fixed in the python-tqdm-bash-completion-4.66.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10951-1 jcat-tool-0.1.3-1.8 on GA media
These are all security issues fixed in the jcat-tool-0.1.3-1.8 package on the GA media of openSUSE Tumbleweed...
GHSA-QQ99-P57R-G3V7 code injection vulnerability exists in the huggingface/text-generation-inference repository
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
code injection vulnerability exists in the huggingface/text-generation-inference repository
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
CVE-2024-3924
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
CVE-2024-3924 Code Injection in huggingface/text-generation-inference
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
CVE-2024-3924 Code Injection in huggingface/text-generation-inference
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
CVE-2024-3924 Code Injection in huggingface/text-generation-inference
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
CVE-2024-30172 vulnerabilities
Vulnerabilities for packages: gradle-stage0, ruby3.2-bouncy-castle-java, elasticsearch, gradle, jruby, sonarqube-10, ruby3.3-bouncy-castle-java, opensearch, keycloak...
GHSA-2G68-C3QC-8985 vulnerabilities
Vulnerabilities for packages: py3-werkzeug, superset, nemo, airflow, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, airflow-core...
MAL-2024-1308 Malicious code in not-exist-lykos-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a4ae62646ef95a3157dcd61e8c0f58a25bec2c826d45f514c6e7bffde0126d4 The OpenSSF Package Analysis project identified 'not-exist-lykos-poc' @ 66.6.6 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-1274 Malicious code in ui-common-components-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...
GHSA-Q64H-39HV-4CF7 vulnerabilities
Vulnerabilities for packages: conftest-fips, conftest, zarf, k9s, kubescape, tflint, zot, terraform, tfsec...
GHSA-4VWX-54MW-VQFW vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
CDeX 安全漏洞
CDeX is a free software package from CDeX Inc. for extracting digital audio from audio CDs and converting audio formats for Microsoft Windows. A security vulnerability exists in CDeX 5.7.1 and earlier versions that originated from allowing an attacker to conduct a brute force attack against a val...
IBM SPSS Statistics Resource Management Error Vulnerability
IBM SPSS Statistics is a software package from International Business Machines IBM. It is used for interactive or batch statistical analysis. A resource management error vulnerability exists in IBM SPSS Statistics, which can be exploited by an attacker to create multiple files, exhaust file handl...
EulerOS 2.0 SP8 : sos (EulerOS-SA-2024-1300)
According to the versions of the sos package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86,...