13090 matches found
CGA-3799-MMJ9-V3CG
Bulletin has no description...
CGA-7F79-3835-69XC
Bulletin has no description...
CVE-2024-9102 phpLDAPadmin: Improper Neutralization of Formula Elements
phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value CSV file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet...
MAL-2024-12026 Malicious code in pushservicejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8875b705a6e055665ad1912b3f5aeca6578af2778e4b541e7061ae20d6ecbd01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CGA-F3H7-GMF2-7G62
Bulletin has no description...
MAL-2024-11997 Malicious code in internallib_v871 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b95724fc9b2d9d8f204a0d94234e4f931f30bcbbb1686d50b026ad54373fa8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11980 Malicious code in fluid-renderer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c91755cc441a577f7a891af00b7ad8e1a9de715f40002af3df668be2b19d571 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12052 Malicious code in uflexreward-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a03cd0b643eecb9171dd74f66e1916442f16b25e64f6652fc489fda6e8fe19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHSA-2024:11483 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
MAL-2024-11959 Malicious code in configure-pages (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79cd1afeb9acab2c5d187d719ceadc3a57f71df17a7d824796c4d9fbcb61081b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RLSA-2024:10281 Moderate: kernel:4.18.0 security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: edia: dvbdev: fix a use-after-free CVE-2024-27043 kernel: Bluetooth: l2cap: fix null-ptr-deref in l2capchantimeout CVE-2024-27399 kernel: bpf: Add BPFPROGTYPECGROUPSKB attach type...
CVE-2024-12693 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-12695 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-12692 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-W32M-9786-JP63 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, crossplane-provider-azure-storage, pulumi-kubernetes-operator, dynamic-localpv-provisioner-fips, kyverno-policy-reporter-ui, crossplane-provider-aws-s3, prometheus-alertmanager, trust-manager, stakater-reloader-fips, fq, ko-fips...
GO-2024-3337 Mattermost Improper Validation of Specified Type of Input vulnerability in github.com/mattermost/mattermost-server
Mattermost Improper Validation of Specified Type of Input vulnerability in github.com/mattermost/mattermost-server...
MAL-2024-12181 Malicious code in @hisdk/mail-mac (npm)
This package has a preinstall script to download an execute a Go-variant of the Cobalt Strike beacon. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396c6b416f2f3b292fa9331c7d139c100af0b05e27f9f92ab265b9767c90ec41 Any computer that has this package installed or...
MAL-2024-11912 Malicious code in focal-examples (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a810e0097be46a2d0ef76ac3c6aa2088c3467e69485c408f22014bc66dd07530 The OpenSSF Package Analysis project identified 'focal-examples' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
Cross-site Scripting (XSS)
ibexa/admin-ui is vulnerable to a Cross-Site Scripting XSS. The vulnerability is due to improper sanitization in the Content name pattern mechanism, which is used to build Content names from one or more fields. Exploitation requires Content edit permissions, allowing an attacker to inject malicio...