CVE-2023-22970

Bottles before 51.0 mishandles YAML load, which allows remote code execution via a crafted file...

CVE-2022-42336

Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...

CVE-2022-42336

Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...

CVE-2022-42336

The CVE-2022-42336 issue affects Xen on AMD Family 17h and Hygon Family 18h CPUs, where SSBD activation is coordinated across threads via a per-core counter. The vulnerability arises when guest writes to VIRT_SPEC_CTRL.SSBD are propagated to the helper that tracks per-core SSBD activity, causing ...

CVE-2022-42336

Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...

Mishandling of guest SSBD selection on AMD hardware

ISSUE DESCRIPTION The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads require SSBD active in order to...

Ubuntu: Security Advisory (USN-6073-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-32573

The CVE-2023-32573 issue affects QtSvg: in Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, the QSvgFont m_unitsPerEm initialization is mishandled. This has an Availability impact (per CVSS) and is rated Medium (6.5) with network access, no privileges, an...

Denial Of Service (DoS)

IBM MQ is vulnerable to Denial Of Service DoS. The vulnerability exists due to mishandling of authorization to craft messages which allows an attacker to cause an application crash via a crafted message...

Webpack 安全漏洞

Webpack is a module packager. Its primary purpose is to bundle JavaScript files for use in the browser, but it is also capable of converting, bundling, or packaging almost any resource or asset. A security vulnerability exists in Webpack that stems from a vulnerability that could allow a remote...

Stargate-Bukkit 安全漏洞

Stargate-Bukkit is an original MineCraft portal plugin open-sourced by Stargate Rewritten. A security vulnerability exists in versions prior to Stargate-Bukkit 0.7.9.11, which stems from mishandling of data, resulting in duplicate data and passengers...

DEBIAN-CVE-2022-37705

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the...

FreeBSD : py-psutil -- double free vulnerability (374793ad-2720-4c4a-b86c-fc4a1780deac)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 374793ad-2720-4c4a-b86c-fc4a1780deac advisory. - psutil aka python-psutil through 5.6.5 can have a double free. This occurs because of refcount...

CVE-2023-26069

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 3 of 4...

CVE-2023-26070

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 4 of 4...

Input validation

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 2 of 4...

CVE-2023-26070

Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 4 of 4...

nss: Arbitrary memory write via PKCS 12

The Mozilla Foundation Security Advisory describes this flaw as: An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled...

Amazon Linux 2023 : device-mapper-multipath, device-mapper-multipath-devel, device-mapper-multipath-libs (ALAS2023-2023-141)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-141 advisory. multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2023:0862-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0862-1 advisory. - CVE-2022-42332: Fixed use-after-free in x86 shadow plus log-dirty mode bsc1209017. - CVE-2022-42333,CVE-2022-42334: Fixed x86/HVM...