MAL-2024-9963 Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

Huawei EulerOS: Security Advisory for iscsi-initiator-utils (EulerOS-SA-2024-2271)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

com.opensearchserver:oss-java-client (1.0.0), com.opensearchserver:oss-utils (1.0.0) +63 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.2.final)

io.undertow:undertow-core MAVEN version 1.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.opensearchserver:oss-java-client 1.0.0 - com.opensearchserver:oss-utils 1.0.0 -...

co.paralleluniverse:comsat-test-utils (0.2.0), io.undertow:undertow-servlet (1.1.0.beta5) +2 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.1.0.beta5)

io.undertow:undertow-core MAVEN version 1.1.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-test-utils 0.2.0 - io.undertow:undertow-servlet 1.1.0.beta5 -...

co.paralleluniverse:comsat-actors-undertow (0.7.0), co.paralleluniverse:comsat-test-utils (0.7.0) +69 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.3.19.final)

io.undertow:undertow-core MAVEN version 1.3.19.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-actors-undertow 0.7.0 - co.paralleluniverse:comsat-test-utils 0.7.0 -...

CVE-2024-34727

In sdpucompareuuidwithattr of sdputils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

GHSA-857Q-XMPH-P2V5 vulnerabilities

Vulnerabilities for packages: efs-utils...

GHSA-857Q-XMPH-P2V5 vulnerabilities

Vulnerabilities for packages: efs-utils...

rubin-jupyter-utils-lab (>=0.10.0, <=0.13.0), swannotificationsservice (0.1.0) potentially affected by CVE-2024-41942 via jupyterhub (1.5.1)

jupyterhub PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - rubin-jupyter-utils-lab =0.10.0, =0.13.0 - swannotificationsservice 0.1.0 Source cves: CVE-2024-41942 Source advisory: OSV:PYSEC-2024-200...

rubin-jupyter-utils-lab (>=0.10.0, <=0.13.0), swannotificationsservice (0.1.0) potentially affected by CVE-2024-41942 via jupyterhub (1.5.1)

jupyterhub PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - rubin-jupyter-utils-lab =0.10.0, =0.13.0 - swannotificationsservice 0.1.0 Source cves: CVE-2024-41942 Source advisory: OSV:GHSA-9X4Q-3GXW-84...

Malicious code in module-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32effd819c82ee7e76761ba803d729c0bd089109f9a63210588b8bfb38a300fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dx-feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36c60f033d9263462d60c68a8bc159f11180d85fe48bf2d13dbabfdf09fb356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7975 Malicious code in module-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32effd819c82ee7e76761ba803d729c0bd089109f9a63210588b8bfb38a300fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dx-feedback-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in module-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-7951 Malicious code in dx-feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36c60f033d9263462d60c68a8bc159f11180d85fe48bf2d13dbabfdf09fb356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

org.jenkins-ci.infra:pipeline-metadata-utils (>=1.9, <=1.10), org.jenkins-ci.main:jenkins-core (>=2.459, <=2.463) +3 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:remoting (3248.v65ecb_254c298)

org.jenkins-ci.main:remoting MAVEN version 3248.v65ecb254c298 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:remoting and may be impacted: - org.jenkins-ci.infra:pipeline-metadata-utils =1.9, =2.459, =2.459, =5851.v18bc61d9354a,...

org.jenkins-ci.infra:pipeline-metadata-utils (>=1.9, <=1.10), org.jenkins-ci.main:jenkins-war (>=2.460, <=2.462) potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (>=2.460, <=2.462)

org.jenkins-ci.main:jenkins-core MAVEN version =2.460, =1.9, =2.460, =2.462 Source cves: CVE-2024-43044 Source advisory: OSV:GHSA-H856-FFVV-XVR4...

org.jenkins-ci.infra:pipeline-metadata-utils (>=1.9, <=1.10), org.jenkins-ci.main:jenkins-war (>=2.460, <=2.462) potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (>=2.460, <=2.462)

org.jenkins-ci.main:jenkins-core MAVEN version =2.460, =1.9, =2.460, =2.462 Source cves: CVE-2024-43044 Source advisory: GHSA-H856-FFVV-XVR4...

org.jenkins-ci.infra:pipeline-metadata-utils (>=1.9, <=1.10), org.jenkins-ci.main:jenkins-war (>=2.460, <=2.462) potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (>=2.460, <=2.462)

org.jenkins-ci.main:jenkins-core MAVEN version =2.460, =1.9, =2.460, =2.462 Source cves: CVE-2024-43045 Source advisory: OSV:GHSA-8PV9-QH96-9HC6...