ASB-A-317826159

Bulletin has no description...

ASB-A-314032846

Bulletin has no description...

ASB-A-303101658

Bulletin has no description...

ASB-A-314698312

Bulletin has no description...

ASB-A-309426390

In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PUB-A-295052332

Bulletin has no description...

GHSA-WR6V-9F75-VH2G vulnerabilities

Vulnerabilities for packages: guac, conftest, skaffold, buildkitd, docker, trivy, conftest-fips, scorecard, kaniko, zot, kubescape...

GHSA-W9H2-PX87-74VX vantage6 remote code execution vulnerability

Impact Authenticated users could inject code into algorithm environment variables Workarounds No...

DLA-3725-1 postfix - security update

Bulletin has no description...

BELL-CVE-2024-0841

Bulletin has no description...

CVE-2023-52389

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in...

Cups Easy 跨站脚本漏洞

Cups Easy is a PHP-based purchasing and inventory software that may become a full-fledged ERP in the future. Cups Easy suffers from a cross-site scripting vulnerability that stems from insufficient escaping of the description parameter on the /cupseasylive/statemodify.php page. An attacker could...

MAL-2024-665 Malicious code in wlwz-2312-5500 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c85949273c1645637458b52979f1f1f07fe1d80347e5df1e9c5021e5c58b51e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-721 Malicious code in wlwz-2312-6102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8af0d4163cf107d93786c6115644304751f181060933cf8d948f9fb3ea540f4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-625 Malicious code in wlwz-2312-5005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c11878fb7f8d63a7c50e16d6aef593f0decc3ebde705e39c70bd7fca11531996 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-375 Malicious code in wlwz-2312-2207 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f005d20bf86364b2facef1f27f23a4f20c26e231522a794d007953d87700d14d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-379 Malicious code in wlwz-2312-2302 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40d619752409b9a4031a182083e85661f431341dbcf506bb17da698343fac48d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-270 Malicious code in wlwz-2312-1101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a52520d6909c6f84814df9b02a4883d19438370dc4a38825fe0d011e90949d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-323 Malicious code in wlwz-2312-1700 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c18ad50f5ec5eba33369f26d64878d76a5164f40d2147d161f9f1af3047bc4cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-217 Malicious code in wlwz-2312-0502 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25d20724f4aed5c80f5c8e56879a718c14c454765f905a06cc3465c02efc12b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...