MAL-2024-11283 Malicious code in @volcenjine/rtc (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11276 Malicious code in @mysas/shared (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11269 Malicious code in @iherb-payment/pages (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11268 Malicious code in @facetca/facet-ruler (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11260 Malicious code in @bytedanc-ad/market-ui-vue2 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11235 Malicious code in appetize-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c31f44a5dab1f6af3da9463b68db6380a0a280ac35c3d3051f96c24f87c7821e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11229 Malicious code in calendervue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c8db5b1dc0e0d6925e52ee6e73b12edcd51a073f88c65b625ceffe357bd6cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHSA-2024:10858 Red Hat Security Advisory: ruby security update

Bulletin has no description...

RHSA-2024:10850 Red Hat Security Advisory: ruby:2.5 security update

Bulletin has no description...

Marvin Attack vulnerability in SP Math All RSA

...

BELL-CVE-2024-53142

Bulletin has no description...

BELL-CVE-2024-53141

Bulletin has no description...

BELL-CVE-2024-53589

Bulletin has no description...

CGA-242H-5Q23-PGFF

Bulletin has no description...

CVE-2024-54137

Removed by vendor...

CVE-2024-54136 Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/upload.php where the user supplied input via collection get parameter is directly provided to...

BELL-CVE-2024-53131

Bulletin has no description...

Denial Of Service (DoS)

io.undertow, undertow-core is vulnerable to Denial of Service DoS. The vulnerability is due to an OutOfMemory error caused by a malicious user sending crafted requests through the FormAuthenticationMechanism, allowing an attacker to trigger the error...

ALSA-2024:10860 Important: ruby:3.1 security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: rexml: REXML ReDoS vulnerability CVE-2024-49761 For more details about the security issues, including the impact, a CVSS score,...

CVE-2024-53470

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/gatewaypagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...