BELL-CVE-2024-44946

Bulletin has no description...

BELL-CVE-2024-45620

Bulletin has no description...

BELL-CVE-2024-45306

Bulletin has no description...

PT-2024-29396 · Yugabyte · Yugabytedb

Name of the Vulnerable Software and Affected Versions: YugabyteDB version 2.21.1.0 Description: A buffer overflow issue was discovered in YugabyteDB via the insert into parameter. Recommendations: For YugabyteDB version 2.21.1.0, consider restricting the use of the insert into parameter until a...

CVE-2024-42991

MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution...

CVE-2024-38858 Cross-site scripting in Robotmk logs view

Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts in the Robotmk logs view...

CVE-2024-20085

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944204; Issue ID: MSV-1560...

MAL-2024-8119 Malicious code in @diotoborg/aliquam-aperiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbd932a33735ac102fb158952f447c8cadcd9ddc39aff2824c8d9cde66eed3dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8667 Malicious code in @diotoborg/ullam-neque-voluptates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206aa477c95775264ca34e824a6b56da2f94b6e1592b395003f7ca3f1bbb3361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8294 Malicious code in @diotoborg/est-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1bf3524b360d01734e3e3f8afb998cea08c72a5e92b7cda4514e48d7c05fd6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8479 Malicious code in @diotoborg/nostrum-nostrum-ipsum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79c609f8554b49a2d226bb212ff907ffb5d43a8639f935c1b4e091106a2cbf28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8432 Malicious code in @diotoborg/molestiae-ratione-tempora (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7289e418d69476e25afc098f6e4ad12e76478784d4053f660ebdf66869ce2321 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8587 Malicious code in @diotoborg/ratione-animi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99fbce442b156c6ca8741c6adc28f303a48f96a03c4ed901e5665e96c520f9d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8491 Malicious code in @diotoborg/odio-architecto-ut (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 242e04cb7795a593bc209c4272c33abdcdc2ad9b903f569de9d57c019e6eef9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8559 Malicious code in @diotoborg/quia-nulla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61727070a6eb33dd49395695146cd5f8370da804f624957433b2a75b1d17b20f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8349 Malicious code in @diotoborg/harum-nesciunt-dolores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0a4ec64db17e0dd47d89722dc0d30cd003ed2c3c8336940cf7387df61827ea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45508

HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...

PT-2024-10389 · Zimbra · Zimbra Collaboration Suite

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration Suite ZCS versions through 10.1 Description: The issue exists due to inadequate protection of the web page structure in the Briefcase Module of the Zimbra Collaboration Suite ZCS. An attacker can exploit this by creating ...

ASB-A-344620292

Bulletin has no description...

Improper Input Validation

Ingress-nginx is vulnerable to Improper Input Validation. The vulnerability is due to improper annotation validation, allowing an actor with permission to create Ingress objects to inject arbitrary commands and obtain the credentials of the ingress-nginx controller...