PT-2023-21895 · Jenkins · Jenkins Octoperf Load Testing Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OctoPerf Load Testing Plugin Plugin versions 4.5.2 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to a previously configured Octoperf server using attacker-specified credentials. T...

WordPress Disqus Conditional Load Plugin <= 11.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Disqus Conditional Load Type Plugin Vulnerable versions = 11.1.1 Fixed in 11.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23732 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID edb6737fa0de Credits yuyudhn...

CVE-2023-27595

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This ca...

Design/Logic Flaw

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This ca...

CVE-2023-27595 Cilium eBPF filters may be temporarily removed during agent restart

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This ca...

CVE-2023-27595

CVE-2023-27595 affects Cilium 1.13.0 where, on startup, a brief window occurs during which Cilium eBPF programs are not attached to the host, leaving the host without Cilium features. This can disrupt newly established connections due to lack of Load Balancing and may permit Network Policy bypass...

GHSA-R5X6-W42P-JHPP Cilium eBPF filters may be temporarily removed during agent restart

Impact When Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This can cause disruption to newly established connections during this period due to the lack of Load Balancin...

Cilium eBPF filters may be temporarily removed during agent restart

Impact When Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This can cause disruption to newly established connections during this period due to the lack of Load Balancin...

DEBIAN-CVE-2023-1452

A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file filters/loadtext.c. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit...

CVE-2023-1452

CVE-2023-1452 affects GPAC 2.3-DEV-rev35-gbbca86917-master. The issue is tied to an unknown functionality in filters/load_text.c that can be triggered via local access and leads to a buffer overflow. The vulnerability has been disclosed publicly and a patch is advised. Severity is high (per CVE d...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A resource management error vulnerability exists in GPAC version 2.3-DEV-rev35-gbbca86917-master, which stems from the presence of an unknown function in the file filters/loadtext.c, resulting in a buffer overflow...

PT-2023-21235 · Cilium · Cilium

Name of the Vulnerable Software and Affected Versions: Cilium version 1.13.0 Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. When Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this...

CVE-2023-27595: Improper Handling of Exceptional Conditions

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This ca...

DEBIAN-CVE-2023-24180

Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmaploader.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted elf file...

CVE-2023-24180

Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmaploader.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted elf file...

CVE-2023-24180

Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmaploader.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted elf file...

UBUNTU-CVE-2023-24180

Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmaploader.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted elf file...

PT-2025-53203

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.6-00002-g9d4898824677 Description A flaw exists in the Linux kernel's crypto safexcel driver. A failure during the loading of the safexcel driver can lead to improperly cleaned-up IRQ affinity and workqueues...

WordPress Ajax Load More Plugin < 5.6.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Ajax Load More Type Plugin Vulnerable versions 5.6.0.3 Fixed in 5.6.0.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4466 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 33d2d66c78ff Credits Lana Codes Requir...

PT-2023-19460 · Libelfin +1 · Libelfin +1

Name of the Vulnerable Software and Affected Versions: Libelfin version 0.3 Description: The issue is related to an integer overflow in the load function at elf/mmap loader.cc, which can be exploited by attackers to cause a Denial of Service DoS via a crafted elf file. Recommendations: For Libelf...