1555 matches found
OPENSUSE-SU-2024:10969-1 libpcap-devel-1.10.1-1.2 on GA media
These are all security issues fixed in the libpcap-devel-1.10.1-1.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13329-1 jetty-annotations-9.4.53-1.1 on GA media
These are all security issues fixed in the jetty-annotations-9.4.53-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12924-1 libQt6Svg6-6.5.0-2.1 on GA media
These are all security issues fixed in the libQt6Svg6-6.5.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11600-1 libplib0-1.8.5+svn.2173-6.1 on GA media
These are all security issues fixed in the libplib0-1.8.5+svn.2173-6.1 package on the GA media of openSUSE Tumbleweed...
GHSA-QQ99-P57R-G3V7 code injection vulnerability exists in the huggingface/text-generation-inference repository
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
code injection vulnerability exists in the huggingface/text-generation-inference repository
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
CVE-2024-3924
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
CVE-2024-3924 Code Injection in huggingface/text-generation-inference
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
CVE-2024-3924 Code Injection in huggingface/text-generation-inference
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
CVE-2024-3924 Code Injection in huggingface/text-generation-inference
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...
CVE-2024-30172 vulnerabilities
Vulnerabilities for packages: ruby3.3-bouncy-castle-java, elasticsearch, ruby3.2-bouncy-castle-java, gradle-stage0, opensearch, keycloak, sonarqube-10, gradle, jruby...
GHSA-2G68-C3QC-8985 vulnerabilities
Vulnerabilities for packages: superset, airflow-core, kubeflow-jupyter-web-app, airflow, kubeflow-volumes-web-app, nemo, kubeflow-pipelines-visualization-server, py3-werkzeug...
MAL-2024-1308 Malicious code in not-exist-lykos-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a4ae62646ef95a3157dcd61e8c0f58a25bec2c826d45f514c6e7bffde0126d4 The OpenSSF Package Analysis project identified 'not-exist-lykos-poc' @ 66.6.6 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-1274 Malicious code in ui-common-components-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...
GHSA-Q64H-39HV-4CF7 vulnerabilities
Vulnerabilities for packages: tfsec, tflint, zarf, k9s, conftest-fips, zot, kubescape, terraform, conftest...
GHSA-4VWX-54MW-VQFW vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
CDeX 安全漏洞
CDeX is a free software package from CDeX Inc. for extracting digital audio from audio CDs and converting audio formats for Microsoft Windows. A security vulnerability exists in CDeX 5.7.1 and earlier versions that originated from allowing an attacker to conduct a brute force attack against a val...
IBM SPSS Statistics Resource Management Error Vulnerability
IBM SPSS Statistics is a software package from International Business Machines IBM. It is used for interactive or batch statistical analysis. A resource management error vulnerability exists in IBM SPSS Statistics, which can be exploited by an attacker to create multiple files, exhaust file handl...
EulerOS 2.0 SP8 : sos (EulerOS-SA-2024-1300)
According to the versions of the sos package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86,...