x-data-spreadsheet 跨站脚本漏洞

x-data-spreadsheet is a web-based JavaScript canvas spreadsheet by the individual developer yuliang.liang in China. A security vulnerability exists in x-data-spreadsheet, which stems from a lack of cleanup of values in inserted cells and a cross-site scripting XSS vulnerability...

Denial Of Service (DoS)

pdns-recursor is vulnerable to denial of service. The vulnerability exists due to an Improper Cleanup upon a Thrown Exception when protobuf logging is enabled leading to a daemon crash...

Malicious code in google-iot-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b6b3105c3a643952ccd44dddd3ed028de61de359b2072023d06603b08279588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-237-02)

The version of kernel-generic installed on the remote host is prior to 5.15.63 / 5.15.63smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-237-02 advisory. New kernel packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the...

The vulnerability of the OPC UA node-opcua software implementation, related to incorrect resource cleanup or release, allows a perpetrator to trigger a service failure.

The vulnerability of the OPC UA node-opcua software implementation is related to incorrect cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

USN-5582-1: Linux kernel (Azure CVM) vulnerabilities

Arthur Mongodin discovered that the netfilter subsystem in the Linux kernel did not properly perform data validation. A local attacker could use this to escalate privileges in certain situations. CVE-2022-34918 Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux...

The vulnerability of the Jinja2 HTML templating tool, a programming language interpreter for Python, allows attackers to trigger a denial-of-service attack.

The vulnerability of the Jinja2 HTML templating engine, a Python-based programming language interpreter, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in their lack of access control mechanisms. This allows attackers to trigger service interruptions.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

DEBIAN-CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

Input validation

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

CVE-2022-37428

PowerDNS Recursor (versions up to 4.5.9, 4.6.2, and 4.7.1) is affected when protobuf logging is enabled. The issue is an improper cleanup upon a thrown exception which can cause a denial of service (daemon crash) via a crafted DNS query that elicits a specific response property. Public sources in...

PT-2024-11770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns temporary data corruption in the insert range of the smb3 module. The insert range does not discard the affected cached region, which can risk temporarily corrupting...

PT-2024-11771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to temporary data corruption in the collapse range of the smb3 module. The collapse range does not discard the affected cached region, which can risk temporarily...

Malicious code in veu-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e794c55fb7840fa1fbf917b5b835e97944eea766103d51d7ff5898b0729730af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ve-loaer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f591aa173fa95037c0279b301e3fe1d86b8db7b3165221944fb20fd10021e7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xmdzdom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd2af82c7ec5d3ff6fa638c6c089e7c66d6ff4d7a360bad512f65513623033bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slughifvy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7ca842916d67596bdff521eb955f87ea1e9a8a0d4f6ba45527f8e2bb1e32515 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reacta-ollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 825fd3f747fc9038be3ca4b98812ee56a1a54a97edcc9eb91bbdbab57cdf3c96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...