DEBIAN-CVE-2023-0458

A speculative pointer dereference problem exists in the Linux Kernel on the doprlimit function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or...

CVE-2023-0458

A speculative pointer dereference problem exists in the Linux Kernel on the doprlimit function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or...

UBUNTU-CVE-2023-0458

A speculative pointer dereference problem exists in the Linux Kernel on the doprlimit function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or...

proveAndClaim and proveAndClaimWithResolver can be front-run to claim the same name by a malicious user

Lines of code Vulnerability details Impact In the DNSRegistrar contract, the proveAndClaim and proveAndClaimWithResolver functions are used to claim a name. And this name is not encrypted. This can create a race condition because once this name is claimed, it cannot be claimed by other users. In...

DEBIAN-CVE-2023-0045

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ibprctlset function updates the Thread Information Flags TIFs for the task and updates the SPECCTRL MSR on the function speculationctrlupdate, but the IBPB is only issued on the next...

GHSA-WJ6R-53F5-Q789 Duplicate Advisory: AVideo contains Command injection when embedding a video link

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pgvh-p3g4-86jw. This link is maintained to preserve external references. Original Description Impact: An attacker could execute remote code on a system running wwbn/avideo Step to Reproduce: 1. Go to the My Vide...

CVE-2023-30414

Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vmloop at /jerry-core/vm/vm.c...

CVE-2023-30408

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

CVE-2023-30623

embano1/wip is a GitHub Action written in Bash. Prior to version 2, the embano1/wip action uses the github.event.pullrequest.title parameter in an insecure way. The title parameter is used in a run statement - resulting in a command injection vulnerability due to string interpolation. This...

CVE-2023-30406

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

UBUNTU-CVE-2023-30408

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

Stack overflow

Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vmloop at /jerry-core/vm/vm.c...

Design/Logic Flaw

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

CVE-2023-30623 Arbitrary command injection in embano1/wip

embano1/wip is a GitHub Action written in Bash. Prior to version 2, the embano1/wip action uses the github.event.pullrequest.title parameter in an insecure way. The title parameter is used in a run statement - resulting in a command injection vulnerability due to string interpolation. This...

CVE-2023-30408

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

CVE-2023-30410

Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecmaopfunctionconstruct at /operations/ecma-function-object.c...

Juniper Junos OS Vulnerability (JSA70586)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70586 advisory. - An Improper Handling of Unexpected Data Type vulnerability in IPv6 firewall filter processing of Juniper Networks Junos OS on the ACX Series devices will prevent a firewal...

PYSEC-2023-87

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

CVE-2023-30608

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

CVE-2023-30608 Parser contains an inefficient regular expression in sqlparse

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...