com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.infra:pipeline-metadata-utils (>=1.0, <=1.2) +6 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (1.651)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.0, =0.10, =2.0.1, =1.58, =1.63 -...

org.jenkins-ci.infra:pipeline-metadata-utils (>=1.9, <=1.10), org.jenkins-ci.main:jenkins-war (>=2.460, <=2.462) potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (>=2.460, <=2.462)

org.jenkins-ci.main:jenkins-core MAVEN version =2.460, =1.9, =2.460, =2.462 Source cves: CVE-2024-43044 Source advisory: GHSA-H856-FFVV-XVR4...

org.jenkins-ci.infra:pipeline-metadata-utils (>=1.9, <=1.10), org.jenkins-ci.main:jenkins-war (>=2.460, <=2.462) potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (>=2.460, <=2.462)

org.jenkins-ci.main:jenkins-core MAVEN version =2.460, =1.9, =2.460, =2.462 Source cves: CVE-2024-43045 Source advisory: MEND:CVE-2024-43045...

org.jenkins-ci.infra:pipeline-metadata-utils (>=1.9, <=1.10), org.jenkins-ci.main:jenkins-war (>=2.460, <=2.462) potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (>=2.460, <=2.462)

org.jenkins-ci.main:jenkins-core MAVEN version =2.460, =1.9, =2.460, =2.462 Source cves: CVE-2024-43044 Source advisory: MEND:CVE-2024-43044...

io.gitee.johnpeng:mx-dal-elastic (4.1.0), io.gitee.johnpeng:mx-service-utils (>=3.0.3, <=3.0.7) potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (9.3)

com.graphql-java:graphql-java MAVEN version 9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic 4.1.0 - io.gitee.johnpeng:mx-service-utils =3.0.3, =3.0.7 Source cves:...

io.gitee.johnpeng:mx-dal-elastic (>=4.1.1, <=5.2.1), io.gitee.johnpeng:mx-dal-hibernate (>=5.0.0, <=5.2.4) +6 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (9.7)

com.graphql-java:graphql-java MAVEN version 9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic =4.1.1, =5.0.0, =5.1.0, =2.0.1, =1.0.0, =3.0.7-patch1, =5.3.10 -...

Malware in mmp-test-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI repository that targets Apple macOS systems with the goal of stealing users' Google Cloud credentials from a narrow pool of victims. The package, named "lr-utils-lib," attracted a total of 59 downloads...

Malicious code in appds-nodejs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac973f28037939ed23e341eacd9fcc006c3709075045f2d51232131c111977 The OpenSSF Package Analysis project identified 'appds-nodejs-utils' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

Security Bulletin: Security vulnerabilities may affect Ubuntu packages that are shipped with IBM CICS TX Advanced.

Summary Security vulnerabilities may affect Ubuntu packages that are shipped with IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the issues. Vulnerability Details CVEID:CVE-2023-4641 DESCRIPTION: shadow-maint shadow-utils could allow a local authenticated attacker to obtain sensitive...

cvexplore (>=0.2.6.0, <=0.2.6.1), meloetta (1.1.0) +4 more potentially affected by CVE-2024-6345 via setuptools (58.0.0)

setuptools PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cvexplore =0.2.6.0, =0.0.1, =0.3.1, =1.3.0, =1.6.0 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

colony-cli (>=1.2.13b0, <=1.3.0b0), cumulusci (>=3.32.0, <=3.32.1) +16 more potentially affected by CVE-2024-6345 via setuptools (54.2.0)

setuptools PYPI version 54.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colony-cli =1.2.13b0, =3.32.0, =0.1.0, =0.1.0, =0.0.1, =2.0.0.dev4, =0.0.1, =0.0.3, =1.4.0b0, =1.1.3, =0.5.0, =0.5.1 and more Source cves:...

pyaiplayer (>=0.1.2, <=0.1.3), rabbitmq-decorator (>=0.0.0.post3, <=0.0.1) +1 more potentially affected by CVE-2024-6345 via setuptools (65.0.2)

setuptools PYPI version 65.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pyaiplayer =0.1.2, =0.0.0.post3, =0.0.1 - raise-utils 2.5.0 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

MAL-2024-7734 Malicious code in mmp-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb46d1d23ab47e71a3d4b40022a8e93d5c2d099e133d1c45bf7563d370a6773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mmp-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb46d1d23ab47e71a3d4b40022a8e93d5c2d099e133d1c45bf7563d370a6773 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHEL 9 : pcs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - loader-utils: prototype pollution in function parseQuery in parseQuery.js CVE-2022-37601 - A vulnerabilit...

RHEL 8 : pcs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl CVE-2021-23362 ...

Malicious code in @mariott/mi-headless-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 052067d97e0b49250cecab16aa79fa0a7dec5cb225d908a93dc9db97fb2f74d1 The OpenSSF Package Analysis project identified '@mariott/mi-headless-utils' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

openSUSE Security Advisory (SUSE-SU-2024:1639-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-7433 Malicious code in action-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31baa3db4424164fa3d7884ba12d4c44fdfe3bc4db9eb835121b5adbeb9485db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...