ae.teletronics.nlp:entityextraction (1.3), ai.catboost:catboost-spark_2.3_2.11 (>=0.25, <=1.2.7) +3609 more potentially affected by CVE-2017-15288 via org.scala-lang:scala-compiler (>=2.11.0, <=2.11.11)

org.scala-lang:scala-compiler MAVEN version =2.11.0, =0.25, =0.42.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.4.1, =2.0.0, =3.34.0.3-1-2.2, =2.0.0, =2.0.0, =2.0.18, =2.0.0, =2.2.10 and more Source cves: CVE-2017-15288 Source advisory: GHSA-QVXV-PMQ9-4Q7G...

ai.x:play-json-extensions_2.12 (0.10.0), at.iem:sysson_2.12 (>=1.13.0, <=1.16.0) +1197 more potentially affected by CVE-2017-15288 via org.scala-lang:scala-compiler (>=2.12.0, <=2.12.3)

org.scala-lang:scala-compiler MAVEN version =2.12.0, =1.13.0, =3.5.4-rc.0, =3.5.9, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.13 and more Source cves: CVE-2017-15288 Source advisory: OSV:GHSA-QVXV-PMQ9-4Q7G...

ae.teletronics.nlp:entityextraction (1.3), ai.catboost:catboost-spark_2.3_2.11 (>=0.25, <=1.2.7) +3609 more potentially affected by CVE-2017-15288 via org.scala-lang:scala-compiler (>=2.11.0, <=2.11.11)

org.scala-lang:scala-compiler MAVEN version =2.11.0, =0.25, =0.42.1, =1.4.2, =1.4.2, =1.4.2, =1.4.2, =1.4.1, =2.0.0, =3.34.0.3-1-2.2, =2.0.0, =2.0.0, =2.0.18, =2.0.0, =2.2.10 and more Source cves: CVE-2017-15288 Source advisory: OSV:GHSA-QVXV-PMQ9-4Q7G...

GHSA-QVXV-PMQ9-4Q7G High severity vulnerability that affects org.scala-lang:scala-compiler

The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /tmp/scala-devel/$USER:shared/scalac-compile-server-port, which allows local users to write to arbitrary class files and consequently gain privileges...

High severity vulnerability that affects org.scala-lang:scala-compiler

The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /tmp/scala-devel/$USER:shared/scalac-compile-server-port, which allows local users to write to arbitrary class files and consequently gain privileges...

ai.x:play-json-extensions_2.12 (0.10.0), at.iem:sysson_2.12 (>=1.13.0, <=1.16.0) +1197 more potentially affected by CVE-2017-15288 via org.scala-lang:scala-compiler (>=2.12.0, <=2.12.3)

org.scala-lang:scala-compiler MAVEN version =2.12.0, =1.13.0, =3.5.4-rc.0, =3.5.9, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.4-rc.0, =3.5.13 and more Source cves: CVE-2017-15288 Source advisory: GHSA-QVXV-PMQ9-4Q7G...

CVE-2018-12387

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content...

CVE-2018-12387

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content...

Null pointer dereference

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content...

CVE-2018-12387

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content...

CVE-2018-12387

Mozilla Firefox and Firefox ESR are affected by CVE-2018-12387 due to a memory-safety bug in the JavaScript JIT where Array.prototype.push is inlined with multiple arguments, causing the stack pointer to be off by 8 bytes after bailout. This results in a memory address leak to the caller, enablin...

CVE-2018-12387

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content...

CVE-2018-12387: Improper Input Validation

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content...

Intel Graphics Drivers Unified Shader Compiler Denial of Service Vulnerability

Intel Graphics Drivers is an integrated graphics driver developed by Intel Corporation, of which Unified Shader Compiler is a compiler. A denial of service vulnerability exists in the Unified Shader Compiler in Intel Graphics Drivers versions prior to 10.18.x.5056, 10.18.x.5057, and 20.19.x.5058....

CVE-2018-12154

Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unprivileged user to potentially create an infinite loop and crash an application via local access...

CVE-2018-12154

Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unprivileged user to potentially create an infinite loop and crash an application via local access...

CVE-2018-12154

CVE-2018-12154 affects Intel Graphics Drivers Unified Shader Compiler. Lenovo’s advisory confirms the issue arises from not sanitizing malicious input in the Unified Shader Compiler, enabling an unprivileged local attacker to trigger an infinite loop and crash via specially crafted input (pre-10....

CVE-2018-12154: Loop with Unreachable Exit Condition

Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unprivileged user to potentially create an infinite loop and crash an application via local access...

PT-2018-11038

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers versions prior to 10.18.x.5056 Intel Graphics Drivers versions prior to 10.18.x.5057 Intel Graphics Drivers versions prior to 20.19.x.5058 Description The issue allows an unprivileged user to potentially create an infini...

CVE-2018-12153

Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 aka 15.33.x.5056, 10.18.x.5057 aka 15.36.x.5057 and 20.19.x.5058 aka 15.40.x.5058 may allow an unprivileged user from a virtual machine guest to potentially crash the host system via local access...