7785 matches found
Malware in seller-webchat-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in secure-fetch-utils-stable
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-11084 Malicious code in secure-fetch-utils-stable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3b042899a3895febb34f95a4fe1c7825c2e278bb7f8625b82b7d220e66c7b5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11076 Malicious code in release-platform-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eefe8dd7e84a6095cb629fff60873eb0f15c63e8fb17e48fbaa4e53e69e4e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in release-platform-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in release-platform-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eefe8dd7e84a6095cb629fff60873eb0f15c63e8fb17e48fbaa4e53e69e4e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in secure-fetch-utils-latest
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-11002 Malicious code in secure-fetch-utils-latest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c66dff7a321aed95e4731350eec61896cd1851d384cb7528dffa45045bbfcaf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in ads-common-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
joplin (>=2.11.1, <=2.13.2) potentially affected by CVE-2024-53268 via @joplin/utils (>=2.11.2, <=2.13.4)
@joplin/utils NPM version =2.11.2, =2.11.1, =2.13.2 Source cves: CVE-2024-53268 Source advisory: SNYK:JS-JOPLINUTILS-15048154...
hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2024-27134 via mlflow (1.29.0)
mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2024-27134 Source advisory: OSV:GHSA-QPGC-W4MG-6V92...
hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2024-27134 via mlflow (1.29.0)
mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2024-27134 Source advisory: OSV:PYSEC-2024-224...
clearml-agent (>=0.17.0, <=0.17.2), manven (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2024-53899 via virtualenv (16.7.12)
virtualenv PYPI version 16.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - clearml-agent =0.17.0, =0.1.0, =0.4.0, =0.0.1, =0.3.0.dev0, =0.13.2rc2, =0.16.3 Source cves: CVE-2024-53899 Source advisory:...
clearml-agent (>=0.17.0, <=0.17.2), manven (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2024-53899 via virtualenv (16.7.12)
virtualenv PYPI version 16.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - clearml-agent =0.17.0, =0.1.0, =0.4.0, =0.0.1, =0.3.0.dev0, =0.13.2rc2, =0.16.3 Source cves: CVE-2024-53899 Source advisory:...
PT-2024-10674 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the analyzeAxes function of FontUtils.cpp, which can lead to a possible out of bounds read. This could...
com.opensearchserver:oss-java-client (1.0.0), com.opensearchserver:oss-utils (1.0.0) +63 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.1.2.final)
io.undertow:undertow-core MAVEN version 1.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.opensearchserver:oss-java-client 1.0.0 - com.opensearchserver:oss-utils 1.0.0 -...
co.paralleluniverse:comsat-actors-undertow (0.6.0), co.paralleluniverse:comsat-test-utils (0.6.0) +161 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.3.15.final)
io.undertow:undertow-core MAVEN version 1.3.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-actors-undertow 0.6.0 - co.paralleluniverse:comsat-test-utils 0.6.0 -...
Malicious code in seller-webchat-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 024c0618a42ed68bfdd63a4e68af72dfe7cdcb55d521bc3b167770c757388465 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
