5867 matches found
CVE-2023-31008
creationtimestamp| type| source ---|---|--- 2023-09-20 07:30:01+00:00| seen| https://t.me/cibsecurity/70759...
CVE-2023-25528
creationtimestamp| type| source ---|---|--- 2023-09-20 07:29:57+00:00| seen| https://t.me/cibsecurity/70758...
CVE-2023-4088
creationtimestamp| type| source ---|---|--- 2023-09-20 07:29:56+00:00| seen| https://t.me/cibsecurity/70757...
CVE-2023-4376
creationtimestamp| type| source ---|---|--- 2023-09-20 07:11:11+00:00| seen| https://t.me/cibsecurity/70753...
CVE-2023-2995
creationtimestamp| type| source ---|---|--- 2023-09-20 00:29:37+00:00| seen| https://t.me/cibsecurity/70752...
RHEL 8 : libwebp (RHSA-2023:5309)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5309 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...
CVE-2023-42328
creationtimestamp| type| source ---|---|--- 2023-09-18 20:28:35+00:00| seen| https://t.me/cibsecurity/70658...
CVE-2023-32558
The use of the deprecated API process.binding can bypass the permission model through path traversal. This vulnerability affects all users using the experimental permission model in Node.js 20.x. Please note that at the time this CVE was issued, the permission model is an experimental feature of...
CVE-2023-32558 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2023-32005
A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.statfs API. As a result...
Path traversal
The use of the deprecated API process.binding can bypass the permission model through path traversal. This vulnerability affects all users using the experimental permission model in Node.js 20.x. Please note that at the time this CVE was issued, the permission model is an experimental feature of...
CVE-2023-32005
A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.statfs API. As a result...
CVE-2023-32005
CVE-2023-32005 affects Node.js 20 when using the experimental permission model. The issue stems from an inadequate permission model that fails to restrict file stats via fs.statfs, allowing a user with --allow-fs-read and a non-* path to retrieve stats on files they do not have read access to. Af...
CVE-2023-34353
creationtimestamp| type| source ---|---|--- 2023-09-05 20:17:13+00:00| seen| https://t.me/cibsecurity/69865...
CVE-2023-36100
creationtimestamp| type| source ---|---|--- 2023-09-01 20:15:15+00:00| seen| https://t.me/cibsecurity/69664...
CVE-2023-38283
creationtimestamp| type| source ---|---|--- 2023-08-29 20:17:34+00:00| seen| https://t.me/cibsecurity/69359...
My SpringOne 2023 Recap
Hi, Spring fans! Look, it's Monday after the first in-person SpringOne of the 2020s and the first since the pandemic, and, being honest, I'm bushed! Vegas is a dizzying, sensational, overwhelming, exciting experience, and SpringOne is too. But it was worth it. The SpringOne show surpassed all...
CVE-2023-39560
creationtimestamp| type| source ---|---|--- 2023-08-28 20:16:46+00:00| seen| https://t.me/cibsecurity/69302...
CVE-2023-1409
creationtimestamp| type| source ---|---|--- 2023-08-23 20:12:52+00:00| seen| https://t.me/cibsecurity/69075...
SUSE SLES15 / openSUSE 15 Security Update : nodejs16 (SUSE-SU-2023:3379-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3379-1 advisory. Update to LTS version 16.20.2. - CVE-2023-32002: Fixed permissions policies bypass via Module.load bsc1214150. -...