6541 matches found
CVE-2023-27477 affecting package rust for versions less than 1.68.2-2
CVE-2023-27477 affecting package rust for versions less than 1.68.2-2. A patched version of the package is available...
CVE-2023-23005 affecting package kernel for versions less than 5.15.111.1-1
CVE-2023-23005 affecting package kernel for versions less than 5.15.111.1-1. A patched version of the package is available...
CVE-2023-0458 affecting package kernel for versions less than 5.15.111.1-1
CVE-2023-0458 affecting package kernel for versions less than 5.15.111.1-1. A patched version of the package is available...
CVE-2021-33391 affecting package tidy for versions less than 5.8.0-6
CVE-2021-33391 affecting package tidy for versions less than 5.8.0-6. A patched version of the package is available...
CVE-2023-2006 affecting package kernel for versions less than 5.15.111.1-1
CVE-2023-2006 affecting package kernel for versions less than 5.15.111.1-1. A patched version of the package is available...
CVE-2023-2162 affecting package kernel for versions less than 5.15.111.1-1
CVE-2023-2162 affecting package kernel for versions less than 5.15.111.1-1. A patched version of the package is available...
CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33
CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33. A patched version of the package is available...
GHSA-8775-5HWV-WR6V Potential for cross-site scripting in PostHog-js
Impact Potential for cross-site scripting in posthog-js. Patches The problem has been patched in posthog-js version 1.57.2. Workarounds - This isn't an issue for sites that have a Content Security Policy in place. - Using the HTML tracking snippet on PostHog Cloud always guarantees the latest...
WordPress BP Social Connect Plugin <= 1.5 is vulnerable to Broken Access Control
Software BP Social Connect Type Plugin Vulnerable versions = 1.5 Fixed in 1.6.2 OWASP Top 10 A2: Broken Authentication Classification Broken Access Control CVE CVE-2023-2704 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 7c30551eab88 Credits Lana Codes Required privileg...
PT-2023-9597 · Starlette +2 · Starlette +2
Name of the Vulnerable Software and Affected Versions: Starlette versions 0.13.5 through 0.27.0 Description: The issue is related to a directory traversal vulnerability in Starlette, which allows a remote unauthenticated attacker to view files in a web service built using Starlette. This is due t...
CVE-2023-31145 Reflected XSS vulnerability in CollaboraOnline
Collabora Online is a collaborative online office suite based on LibreOffice technology. This vulnerability report describes a reflected XSS vulnerability with full CSP bypass in Nextcloud installations using the recommended bundle. The vulnerability can be exploited to perform a trivial account...
PT-2023-2909
Name of the Vulnerable Software and Affected Versions vm2 versions up to and including 3.9.17 Description A sandbox escape issue exists in vm2, allowing a threat actor to bypass sandbox protections and gain remote code execution rights on the host. This is achieved by abusing an unexpected creati...
CVE-2023-32058 Vyper vulnerable to integer overflow in loop
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variables, by assigning the iterator of a loop to a variable, it is possible to overflow the type of the latter. The issue seems to happen only in loops of...
WordPress Contact Form 7 extension for Google Map fields Plugin <= 1.8.3 is vulnerable to Cross Site Scripting (XSS)
Software Contact Form 7 extension for Google Map fields Type Plugin Vulnerable versions = 1.8.3 Fixed in 1.8.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 3a7978727c74 Credits...
CVE-2022-48468 affecting package protobuf-c 1.3.2-1
CVE-2022-48468 affecting package protobuf-c 1.3.2-1. A patched version of the package is available...
CVE-2023-0179 affecting package kernel 5.10.174.1-1
CVE-2023-0179 affecting package kernel 5.10.174.1-1. A patched version of the package is available...
CVE-2023-28466 affecting package kernel 5.10.174.1-1
CVE-2023-28466 affecting package kernel 5.10.174.1-1. A patched version of the package is available...
CVE-2023-1872 affecting package kernel 5.10.174.1-1
CVE-2023-1872 affecting package kernel 5.10.174.1-1. A patched version of the package is available...