CVE-2023-25933

CVE-2023-25933 concerns the Hermes JavaScript engine in React Native. A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could allow arbitrary code execution via untrusted JavaScript when Hermes processes such code. Most React Native apps are not affected ...

GHSA-282V-666C-3FVG transformers has Insecure Temporary File

Insecure Temporary File in GitHub repository huggingface/transformers 4.29.2 and prior. A fix is available at commit 80ca92470938bbcc348e2d9cf4734c7c25cb1c43 and has been released as part of version 4.30.0...

Design/Logic Flaw

Ombi is an open source application which allows users to request specific media from popular self-hosted streaming servers. Versions prior to 4.38.2 contain an arbitrary file read vulnerability where an Ombi administrative user may access files available to the Ombi server process on the host...

PT-2023-22710 · Hermes · Hermes

Name of the Vulnerable Software and Affected Versions: Hermes versions prior to commit da8990f737ebb9d9810633502f65ed462b819c09 Description: A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled could have been used by an attacker to achieve remot...

CVE-2023-31722

There exists a heap buffer overflow in nasm 2.16.02rc1 GitHub commit: b952891...

CVE-2023-31722

There exists a heap buffer overflow in nasm 2.16.02rc1 GitHub commit: b952891...

CVE-2023-31722

There exists a heap buffer overflow in nasm 2.16.02rc1 GitHub commit: b952891...

CVE-2023-31722

There exists a heap buffer overflow in nasm 2.16.02rc1 GitHub commit: b952891...

CVE-2023-31722

There exists a heap buffer overflow in nasm 2.16.02rc1 GitHub commit: b952891...

UBUNTU-CVE-2023-24805

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backend Error Handler beh to create an accessible network printer, this security vulnerability can cause remote code execution. beh.c...

kernel: dm thin: Use last transaction's pmd->root when commit failed

A metadata handling flaw was found in the Linux kernel device-mapper thin provisioning driver. After a failed metadata commit, the in-memory root pointer could reference a mixed set of fresh and stale tree nodes. Subsequent lookups may loop or stall. A local user could use this flaw to cause the...

CVE-2023-31922

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

Design/Logic Flaw

Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...

CVE-2023-32073 AVideo command injection vulnerability

WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at plugin/CloneSite/cloneClient.json.php which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to...

PT-2023-23517 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 1a2c047 Description: An Assertion Failure was discovered in Jerryscript via the jmem heap finalize function at jerry-core/jmem/jmem-heap.c. Recommendations: For Jerryscript version 3.0 commit 1a2c047, consider...

PT-2023-23584 · Wwbn · Wwbn Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions prior to 12.4 Description: A command injection issue exists in WWBN AVideo, allowing Remote Code Execution when the CloneSite Plugin is used. This issue is related to the plugin/CloneSite/cloneClient.json.php endpoint. It...

CVE-2023-31914

Removed by vendor...

CVE-2023-31920

JerryScript CVE-2023-31920 concerns an assertion failure in the vm_loop path (jerry-core/vm/vm.c) affecting JerryScript 3.0 (commit 05dbbd1). The vulnerability is local, with low attack complexity, no privileges required, but requires user interaction and results in a high availability impact (Do...

PT-2023-23515 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 1a2c047 Description: An Assertion Failure was discovered in Jerryscript via the component parser parse class at jerry-core/parser/js/js-parser-expr.c. Recommendations: For Jerryscript version 3.0 commit 1a2c047,...

CVE-2023-31916

CVE-2023-31916 affects JerryScript 3.0 (commit 1a2c047). The vulnerability is an Assertion Failure in the jmem_heap_finalize function (jerry-core/jmem/jmem-heap.c). CVSS metrics in the provided records show a local attack vector with low attack complexity, no privileges required, user interaction...