0x20bf (0.0.1), 2keys (0.5.1) +1926 more potentially affected by CVE-2023-49081 via aiohttp (>=3.0.0b0, <=3.9.0rc0)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.1.0, =0.5.0a0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.3.3, =0.1.0, =0.1.15 and more Source cves: CVE-2023-49081 Source advisory: OSV:GHSA-Q3QX-C6G2-7PW2...

0x20bf (0.0.1), 2keys (0.5.1) +1926 more potentially affected by CVE-2023-49082 via aiohttp (>=3.0.0b0, <=3.9.0rc0)

aiohttp PYPI version =3.0.0b0, =0.0.1a0, =0.1.0, =0.5.0a0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.1.2, =0.3.3, =0.1.0, =0.1.15 and more Source cves: CVE-2023-49082 Source advisory: OSV:GHSA-QVRW-V9RV-5RJX...

PT-2023-7223

Name of the Vulnerable Software and Affected Versions Honeywell ProWatch versions 4.5 and earlier Description The issue is related to errors in data processing, which could allow an attacker to execute arbitrary system code. This could potentially lead to a standard user gaining arbitrary system...

Xxe

A vulnerability has been identified in Siemens OPC UA Modelling Editor SiOME All versions V2.8. Affected products suffer from a XML external entity XXE injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary...

GNU C Library Heap Buffer Overflow DoS

The vulnerability of the popfailstack function in the GNU C Library is related to incorrect data processing. Exploiting this vulnerability allows a remote attacker to cause a service failure...

Apache Arrow Deserialization Vulnerability

Apache Arrow is a cross-language development platform for in-memory data processing from the U.S. Apache Apache Foundation. The platform supports programming languages such as C, C++, C, Go and Java, and provides features such as inter-process communication. A deserialization vulnerability exists...

ROS-20231109-01

Go programming language vulnerability is related to insecure external control of critical state data state when processing the setuid and setgid attributes. Exploitation of the vulnerability could allow an attacker, acting remotely, escalate their privileges and gain access to read, modify, or...

PT-2023-24164 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in the Audio component when processing VOC packet data from ADSP. Recommendations: At the moment, there is no information about a newer version that...

MediaTek Chip Security Breach

The MediaTek chips are a variety of MediaTek chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of valid range checking in the dpe module, which may allow out-of-bounds writes...

nginx.ingress.kubernetes.io/permanent-redirect Controller Command Execution

The vulnerability of the nginx.ingress.kubernetes.io/permanent-redirect controller in the Kubernetes ingress-nginx cluster is related to errors in processing incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Go //line Code Execution

The vulnerability of the “//line” directive in the Go programming language is related to errors in data processing during syntax analysis of code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Airflow Information Disclosure

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the disclosure of information in error-prone areas of the data. Exploiting this vulnerability can allow a malicious actor to influence the integrity of the data...

IBM DB2 DoS

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Apache Oozie Azure HDInsight Privilege Escalation

The vulnerability of the Apache Oozie data processing automation system, used in Azure HDInsight analytics services, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

Windows Message Queuing DoS

The vulnerability of Windows’ Message Queuing system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Windows Message Queuing Code Execution

The vulnerability of Windows’ Message Queuing system is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Message Queuing Code Execution

The vulnerability of Windows’ Message Queuing system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows Message Queuing Code Execution

The vulnerability of Windows’ Message Queuing system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows Message Queuing Code Execution

The vulnerability of Windows’ Message Queuing system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows Message Queuing Code Execution

The vulnerability of Windows’ Message Queuing system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...