Dell BIOS Input Validation Error Vulnerability (CNVD-2023-08767)

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which stems from the inclusion of an incorrect null byte neutralization and could be exploited by a locally authenticated administrator...

ALSA-2022:6542 Moderate: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: ArchiveTar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked CVE-2020-28948 ArchiveTar: improper filename sanitization leads to file overwrites CVE-2020-28949...

Audio Component Qualcomm DoS Execution Code

The vulnerability of the Audio microprogramming component in Qualcomm’s embedded chips is related to a numerical overflow during the playback of WMA format files. Exploiting this vulnerability can allow an attacker to cause system failures or execute arbitrary code...

@netceterapx/click-to-pay-embedded-sdk (>=0.0.1, <=1.0.5) potentially affected by CVE-2022-36083 via jose-browser-runtime (4.1.2)

jose-browser-runtime NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on jose-browser-runtime and may be impacted: - @netceterapx/click-to-pay-embedded-sdk =0.0.1, =1.0.5 Source cves: CVE-2022-36083 Source advisory: MEND:CVE-2022-36083...

alloc-cortex-m (>=0.1.0, <=0.4.2), bottleos (0.2.0) +23 more potentially affected by CVE-2022-36086 via linked_list_allocator (>=0.2.7, <=0.9.1)

linkedlistallocator CARGO version =0.2.7, =0.1.0, =0.1.0, =0.3.0, =0.4.0-pre, =0.4.0-pre, =0.1.0, =0.0.1, =0.3.2, =0.11.0, =0.1.0, =0.0.1, =0.1.0 and more Source cves: CVE-2022-36086 Source advisory: OSV:RUSTSEC-2022-0063...

GLSA-202209-05 : OpenJDK: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-05 OpenJDK: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenJDK. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

CVE-2021-43565

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

OESA-2022-1877 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained,high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.18.1)

The version of AOS installed on the remote host is prior to 5.18.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.18.1 advisory. - An issue was found in Linux kernel before 5.5.4. The mwifiexcmdappendvsietlv function in...

org.hawkular.commons:hawkular-nest-feature-pack (>=0.3.0.final, <=0.3.2.final), org.hawkular.commons:hawkular-nest-itest (>=0.3.0.final, <=0.3.2.final) +20 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (2.0.1.final)

org.wildfly.core:wildfly-server MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.hawkular.commons:hawkular-nest-feature-pack =0.3.0.final, =0.3.0.final, =0.3.0.final,...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr7), org.wildfly.core:wildfly-embedded (1.0.0.cr7) +6 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (1.0.0.cr7)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.cr7 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr7 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha2), org.wildfly.core:wildfly-embedded (2.0.0.alpha2) +28 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (2.0.0.alpha2)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha2 - org.wildfly.core:wildfly-embedd...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta5), org.wildfly.core:wildfly-embedded (1.0.0.beta5) +6 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (1.0.0.beta5)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta5 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr1), org.wildfly.core:wildfly-embedded (1.0.0.cr1) +30 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (1.0.0.cr1)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr1 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta6), org.wildfly.core:wildfly-embedded (1.0.0.beta6) +6 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (1.0.0.beta6)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta6 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr4), org.wildfly.core:wildfly-embedded (1.0.0.cr4) +6 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (1.0.0.cr4)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr4 - org.wildfly.core:wildfly-embedded...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr5), org.wildfly.core:wildfly-embedded (1.0.0.cr5) +6 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (1.0.0.cr5)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.cr5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr5 - org.wildfly.core:wildfly-embedded...

org.hawkular.agent:hawkular-dmr-client (>=0.1.0, <=0.3.0), org.hawkular.agent:hawkular-monitor (>=0.1.0, <=0.3.0) +38 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (1.0.0.cr6)

org.wildfly.core:wildfly-server MAVEN version 1.0.0.cr6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.hawkular.agent:hawkular-dmr-client =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.3.0.final,...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha7), org.wildfly.core:wildfly-embedded (2.0.0.alpha7) +6 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (2.0.0.alpha7)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha7 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha7 - org.wildfly.core:wildfly-embedd...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha9), org.wildfly.core:wildfly-embedded (2.0.0.alpha9) +28 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (2.0.0.alpha9)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.alpha9 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha9 - org.wildfly.core:wildfly-embedd...