13090 matches found
MAL-2024-9686 Malicious code in lib-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9675 Malicious code in jittery-chocolate-hoverfly (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9670 Malicious code in instrumentation-pg (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9609 Malicious code in experimental-purple-walrus (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9593 Malicious code in eighster (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9537 Malicious code in ciomiojui (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9494 Malicious code in aggregate-rose-booby (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9476 Malicious code in @taxify/taxify-code-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9474 Malicious code in @taxify/price-estimate-helper-models (npm)
--- -= Per source details. Do not edit below this line.=-...
Arbitrary Code Execution
github.com/github/git-sizer is vulnerable to Arbitrary Code Execution. The vulnerability is due to the misconfiguration of the system's PATH environment variable, which can allow malicious executables to be inadvertently run when commands are executed if the current directory is placed before the...
BELL-CVE-2024-47674
Bulletin has no description...
GHSA-XGFV-XPX8-QHCR vulnerabilities
Vulnerabilities for packages: keycloak...
CVE-2024-9936 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-43701
CVE-2024-43701 concerns Imagination Technologies PowerVR GPU DDK. The vulnerability arises from a use-after-free in the TLB invalidate path when a dma_buf is imported across multiple GPU devices, enabling a non-privileged user to perform GPU system calls that read and write freed GPU memory. Affe...
BIT-GITLAB-2024-6530 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2. When adding a authorizing an application, it can be made to render as HTML under specific circumstances...
GHSA-PPPG-CPFQ-H7WR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, kubeflow-katib, prism...
BELL-CVE-2024-47662
Bulletin has no description...
BELL-CVE-2024-47664
Bulletin has no description...