Security Bulletin: Vulnerability in shadow-utils library (CVE-2023-4641) affects Power HMC.

Summary The shadow-utils library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-4641 DESCRIPTION: shadow-maint shadow-utils could allow a local authenticated attacker to obtain sensitive information, caused by failing t...

CVE-2024-45751

tgt aka Linux target framework before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical...

RUSTSEC-2024-0385 `cw0` is unmaintained

The crate cw0 was first renamed to utils in 2021 and then to cw-utils because utils was already claimed on crates.io. The crate cw0 is not maintained anymore since then and should be replaced with cw-utils...

`cw0` is unmaintained

The crate cw0 was first renamed to utils in 2021 and then to cw-utils because utils was already claimed on crates.io. The crate cw0 is not maintained anymore since then and should be replaced with cw-utils...

PT-2024-40931 · Cw0 +1 · Cw0 +1

Name of the Vulnerable Software and Affected Versions: cw0 affected versions not specified Description: The issue concerns the crate cw0, which was renamed to utils in 2021 and later to cw-utils because the name utils was already in use on crates.io. The original cw0 crate is no longer maintained...

Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

MAL-2024-9963 Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

Huawei EulerOS: Security Advisory for iscsi-initiator-utils (EulerOS-SA-2024-2271)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

co.paralleluniverse:comsat-test-utils (0.2.0), io.undertow:undertow-servlet (1.1.0.beta5) +2 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.0.beta5)

io.undertow:undertow-core MAVEN version 1.1.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-test-utils 0.2.0 - io.undertow:undertow-servlet 1.1.0.beta5 -...

com.opensearchserver:oss-java-client (1.0.0), com.opensearchserver:oss-utils (1.0.0) +63 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.2.final)

io.undertow:undertow-core MAVEN version 1.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.opensearchserver:oss-java-client 1.0.0 - com.opensearchserver:oss-utils 1.0.0 -...

CVE-2024-34727

In sdpucompareuuidwithattr of sdputils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

GHSA-857Q-XMPH-P2V5 vulnerabilities

Vulnerabilities for packages: efs-utils...

GHSA-857Q-XMPH-P2V5 vulnerabilities

Vulnerabilities for packages: efs-utils...

Malicious code in module-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32effd819c82ee7e76761ba803d729c0bd089109f9a63210588b8bfb38a300fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7975 Malicious code in module-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32effd819c82ee7e76761ba803d729c0bd089109f9a63210588b8bfb38a300fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7951 Malicious code in dx-feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36c60f033d9263462d60c68a8bc159f11180d85fe48bf2d13dbabfdf09fb356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dx-feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36c60f033d9263462d60c68a8bc159f11180d85fe48bf2d13dbabfdf09fb356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dx-feedback-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in module-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

org.jenkins-ci.infra:pipeline-metadata-utils (>=1.9, <=1.10), org.jenkins-ci.main:jenkins-core (>=2.459, <=2.463) +3 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:remoting (3248.v65ecb_254c298)

org.jenkins-ci.main:remoting MAVEN version 3248.v65ecb254c298 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:remoting and may be impacted: - org.jenkins-ci.infra:pipeline-metadata-utils =1.9, =2.459, =2.459, =5851.v18bc61d9354a,...