CVE-2023-52323

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack...

CVE-2023-41983

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-of-service...

USN-5739-2 mariadb-10.3, mariadb-10.6 regression

USN-5739-1 fixed vulnerabilities in MariaDB. It caused a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: MariaDB has been updated to 10.3.38 in Ubuntu 20.04 LTS and to 10.6.12 in Ubuntu 22.04 LTS and Ubuntu 22.10...

focalpointstudio.com Cross Site Scripting vulnerability OBB-3001647

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in focal-manual-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b8267c08beaf2784308f90736258ddb15871543675949db95be58e98520ddd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3089 Malicious code in focal-manual-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b8267c08beaf2784308f90736258ddb15871543675949db95be58e98520ddd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3090 Malicious code in focal-todomvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b67b7a3687f16911a077102bd98fe5720d14993c8093d88351c3036f11b73f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in focal-todomvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b67b7a3687f16911a077102bd98fe5720d14993c8093d88351c3036f11b73f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Privilege Escalation

linux-gcp:focal is vulnerable to privilege escalation. The vulnerability exists in afllc.c which allows an attacker to craft and inject malicious attacks...

CVE-2022-26981

Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c called, indirectly, by tools/louchecktable.c...

Divide By Zero

speex:focal is vulnerable to a Divide by Zero vulnerability. The function static int readsamples allows attackers to cause a denial of service DoS via a crafted WAV file...

Heap-based Buffer Overflow in gpac/gpac

Description Heap-based Buffer Overflow in gpac Proof of Concept Version: MP4Box - GPAC version 1.1.0-DEV-rev1659-g7d3281e88-master c 2000-2022 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929...

Classic Buffer Overflow in gpac/gpac

Description Buffer Overflow in gpac Proof of Concept Version: MP4Box - GPAC version 1.1.0-DEV-rev1647-gb6f68145e-master c 2000-2022 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929 GPAC:...

CVE-2021-45087

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title...

CVE-2021-4019

vim is vulnerable to Heap-based Buffer Overflow...

Denial-of-service (DoS)

systemd:focal is vulnerable to denial-of-service. The vulnerability exists in DHCP client which allows an attacker to send a specially crafted DHCP FORCERENEW packet causing an application crash...

Arbitrary File Read

apport:focal is vulnerable to arbitary file read due to a flaw in the function addinfo...

Microsoft Hyper-V 远程代码执行漏洞（CVE-2021-28476）

CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys Network virtualization service provider patched by Microso...

Exploit for CVE-2021-28476

CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code...

Denial Of Service (DoS)

chromium-browser:focal is vulnerable to denial of service DoS. Heap-based buffer overflow in j2k.c in OpenJPEG allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document...