AZL-13606 CVE-2023-0475 affecting package terraform for versions less than 1.3.2-22

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0...

UBUNTU-CVE-2023-0475

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0...

CVE-2023-25653 Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)

node-jose is a JavaScript implementation of the JSON Object Signing and Encryption JOSE for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default "fallback" crypto back-end, ECC operations in node-jose can trigger a Denial-of-Service DoS condition, due to a...

Intel Battery Life Diagnostic Tool 安全漏洞

Intel Battery Life Diagnostic Tool is a battery life analysis software from Intel Corporation USA. A security vulnerability exists in Intel Battery Life Diagnostic Tool versions prior to 2.2.0. An attacker can exploit this vulnerability to escalate privileges...

PT-2023-13470 · Intel · Intel Battery Life Diagnostic Tool

Name of the Vulnerable Software and Affected Versions: IntelR Battery Life Diagnostic Tool versions prior to 2.2.0 Description: The issue is related to insufficient control flow management, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-13347 · Intel · Intel Battery Life Diagnostic Tool

Name of the Vulnerable Software and Affected Versions: IntelR Battery Life Diagnostic Tool versions prior to 2.2.0 Description: The issue is related to improper initialization in the software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-16290 · Hashicorp +1 · Go-Getter +1

Name of the Vulnerable Software and Affected Versions: HashiCorp go-getter versions 1.6.2 and earlier, 2.1.1 and earlier Description: The issue concerns decompression bombs, which can lead to excessive memory consumption and denial-of-service attacks. Recommendations: For versions 1.6.2 and...

SUSE CVE-2016-7958

In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/CMakeLists.txt by registering this dissector...

SUSE CVE-2018-9261

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-nbap.c by prohibiting the self-linking of DCH-IDs...

SUSE CVE-2018-9264

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dissector could crash with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-adb.c by checking for a length inconsistency...

SUSE CVE-2018-9266

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-isup.c has a memory leak...

SUSE CVE-2018-9272

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak...

SUSE CVE-2018-11760

When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...

SUSE CVE-2020-15103

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data th...

CVE-2022-45297

EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...

PT-2023-14640 · Eq · Eq

Name of the Vulnerable Software and Affected Versions: EQ versions 1.5.31 through 2.2.0 Description: The issue is a SQL injection vulnerability that can be exploited via the UserPwd parameter. This allows for potential unauthorized access to sensitive data. Recommendations: For EQ versions 1.5.31...

EQ SQL注入漏洞

EQ is an enterprise management system by tlfyyds individual developer. A security vulnerability exists in EQ versions v1.5.31 through v2.2.0, which stems from the presence of SQL injection via the UserPwd parameter...

PT-2023-8901

Name of the Vulnerable Software and Affected Versions Rack versions 1.5.0 through 2.0.9.1 Rack versions 2.1.0 through 2.1.4.1 Rack versions 2.2.0 through 2.2.6.1 Rack versions 3.0.0 through 3.0.0.0 Description A denial of service vulnerability in the Range header parsing component of Rack can cau...

CVE-2022-4487

The Easy Accordion WordPress plugin before 2.2.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privile...

PT-2023-14562 · WordPress · Easy Accordion

Name of the Vulnerable Software and Affected Versions: Easy Accordion WordPress plugin versions prior to 2.2.0 Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins. Thi...