6540 matches found
OESA-2023-1311 c-ares security update
This is c-ares, an asynchronous resolver library. It is intended for applications which need to perform DNS queries without blocking, or need to perform multiple Security Fixes: c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a...
CVE-2023-32233 affecting package kernel for versions less than 5.15.112.1-1
CVE-2023-32233 affecting package kernel for versions less than 5.15.112.1-1. A patched version of the package is available...
WordPress ReviewX 1.6.13 Privilege Escalation
Description: ReviewX = 1.6.13 – Arbitrary Usermeta Update to Authenticated Subscriber+ Privilege Escalation Affected Plugin: ReviewX – Multi-criteria Rating & Reviews for WooCommerce Plugin Slug: reviewx Affected Versions: = 1.6.13 CVE ID: CVE-2023-2833 CVSS Score: 8.8 High CVSS Vector:...
CVE-2023-33175 ToUI allows user-specific variables to be shared between users
ToUI is a Python package for creating user interfaces websites and desktop apps from HTML. ToUI is using Flask-Caching SimpleCache to store user variables. Websites that use Website.uservars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1...
CVE-2023-32685 Clipboard based cross-site scripting (blocked with default CSP) in Kanboard
Kanboard is project management software that focuses on the Kanban methodology. Due to improper handling of elements under the contentEditable element, maliciously crafted clipboard content can inject arbitrary HTML tags into the DOM. A low-privileged attacker with permission to attach a document...
PYSEC-2023-82
Django-SES is a drop-in mail backend for Django. The djangoses library implements a mail backend for Django using AWS Simple Email Service. The library exports the SESEventWebhookView class intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
UBUNTU-CVE-2022-39335
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix Federation API allows remote homeservers to request the authorization events in a room. This is necessary so that a homeserver receiving some events can validate that those events are...
DEBIAN-CVE-2023-32067
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...
AZL-26921 CVE-2023-32067 affecting package grpc for versions less than 1.42.0-8
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...
AZL-43924 CVE-2023-32067 affecting package python-pycares 3.1.1-3
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...
AZL-26939 CVE-2023-32067 affecting package nodejs18 for versions less than 18.17.1-2
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...
Code injection
c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...
CVE-2023-0458 affecting package kernel 5.10.179.1-1
CVE-2023-0458 affecting package kernel 5.10.179.1-1. A patched version of the package is available...
CVE-2021-46878 affecting package fluent-bit 1.5.2-2
CVE-2021-46878 affecting package fluent-bit 1.5.2-2. A patched version of the package is available...
CVE-2023-1998 affecting package kernel 5.10.179.1-1
CVE-2023-1998 affecting package kernel 5.10.179.1-1. A patched version of the package is available...
CVE-2021-46879 affecting package fluent-bit 1.5.2-2
CVE-2021-46879 affecting package fluent-bit 1.5.2-2. A patched version of the package is available...
CVE-2019-9210 affecting package advancecomp for versions less than 2.1-14
CVE-2019-9210 affecting package advancecomp for versions less than 2.1-14. A patched version of the package is available...
CVE-2022-27404 affecting package qt5-qtbase for versions less than 5.15.9-1
CVE-2022-27404 affecting package qt5-qtbase for versions less than 5.15.9-1. A patched version of the package is available...