MAL-2024-807 Malicious code in wlwz-2312-7007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 054324edaf863762b0676dc56bb6ef9b8dfa5f3798e0f9815e1e4e01946d9f33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-182 Malicious code in wlwz-2312-0104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5e43717fbc31c2ecf7ba1616d078c32e0ce850f66dfcc54c890237feffd0c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-635 Malicious code in wlwz-2312-5106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 840c20cf73dbfa5e26d4fa725d2de4330dabd94802c0d5a69d775bb30d92ad4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BELL-CVE-2023-51043

Bulletin has no description...

BELL-CVE-2023-51042

Bulletin has no description...

CVE-2024-0806

Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. Chromium security severity: Medium...

CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

CVE-2024-23849

In rdsrecvtracklatency in net/rds/afrds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDSMSGRXDGRAMTRACEMAX comparison, resulting in out-of-bounds access...

CVE-2024-23851

copyparams in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INTMAX bytes, and crash, because of a missing paramkernel-datasize check. This is related to ctlioctl...

The vulnerability in Intel NUC’s built-in software, related to errors in processing input data, allows attackers to exploit their privileges.

The vulnerability of Intel NUC’s built-in software is related to errors in processing input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

PT-2024-3256 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.39.7 MediaWiki versions 1.40.x prior to 1.40.3 MediaWiki versions 1.41.x prior to 1.41.1 Description: The issue is related to the incorrect neutralization of input during web page creation in the...

PT-2024-1776 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10.3 iOS versions prior to 17.3 and 16.7.5 iPadOS versions prior to 17.3 and 16.7.5 macOS Sonoma versions prior to 14.3 Safari versions prior to 17.3 Description: A privacy issue was addressed with improved handling ...

MAL-2024-139 Malicious code in @shenmue_dsc/fluent-ffmpeg-multistream-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3d01a5cf41e8dc5e1f1997a92ef62717b51538e2d3a2c481a7127e22e291101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Code Injection in paddlepaddle

The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...

CVE-2024-23684 upokecenter CBOR Denial of Service

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

CVE-2024-23683 Artemis Java Test Sandbox InvocationTargetException Subclass Escape

Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special subclass of InvocationTargetException. An attacker can abuse this issue to execute arbitrary Java when a victim executes the supposedly sandboxed code...

Denial Of Service

libarchive.so is vulnerable to Denial Of Service. The vulnerability is due to improper input validation in the WARC parser within the warcread function in libarchive/archivereadsupportformatwarc.c. This issue can be exploited by an attacker via crafting a malicious WARC file resulting in Denial O...

CVE-2024-22563

openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc in openvswitch-2.17.8/lib/util.c...

CVE-2024-22402 Improper handling of request URLs in Nextcloud Guests app allows guest users to bypass app allowlist

Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users were able to load the first page of apps they were actually not allowed to access. Depending on the selection of apps installed this may present a permissions bypass. It i...

OPENSUSE-SU-2024:0023-1 Security update for libuev

This update for libuev fixes the following issues: - Update to 2.4.1: Update README with list of moden Linux APIs used Fix 27: possible buffer overrun in uevrun boo1218749 CVE-2022-48620...