CVE-2023-1855 affecting package kernel 5.10.174.1-1

CVE-2023-1855 affecting package kernel 5.10.174.1-1. A patched version of the package is available...

CVE-2023-24607 affecting package qt5-qtbase 5.12.11-3

CVE-2023-24607 affecting package qt5-qtbase 5.12.11-3. A patched version of the package is available...

CVE-2023-1989 affecting package kernel 5.10.174.1-1

CVE-2023-1989 affecting package kernel 5.10.174.1-1. A patched version of the package is available...

CVE-2023-1252 affecting package kernel 5.10.174.1-1

CVE-2023-1252 affecting package kernel 5.10.174.1-1. A patched version of the package is available...

CVE-2023-1990 affecting package kernel 5.10.174.1-1

CVE-2023-1990 affecting package kernel 5.10.174.1-1. A patched version of the package is available...

CVE-2022-4095 affecting package kernel 5.10.174.1-1

CVE-2022-4095 affecting package kernel 5.10.174.1-1. A patched version of the package is available...

CVE-2021-45985 affecting package lua for versions less than 5.4.3-5

CVE-2021-45985 affecting package lua for versions less than 5.4.3-5. A patched version of the package is available...

CVE-2018-25032 affecting package boost for versions less than 1.76.0-3

CVE-2018-25032 affecting package boost for versions less than 1.76.0-3. A patched version of the package is available...

CVE-2023-1252 affecting package kernel for versions less than 5.15.107.1-2

CVE-2023-1252 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2022-4379 affecting package kernel for versions less than 5.15.107.1-2

CVE-2022-4379 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2022-3707 affecting package kernel for versions less than 5.15.107.1-2

CVE-2022-3707 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2023-1249 affecting package kernel for versions less than 5.15.107.1-2

CVE-2023-1249 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2023-30858 Denosaurs emoji has ReDoS vulnerability in `replace` function

The Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reTrimSpace regex has 2nd degree polynomial inefficiency, leading to a delayed response given a big payload. The issue has been patched in 0.3.0. As a workaround, avoid using the...

Fedora 38 : php-laminas-diactoros2 (2023-8cf8786a16)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8cf8786a16 advisory. Version 2.25.2 This release provides a patch for CVE-2023-29530 / GHSA-xv3h-4844-9h36 / LP2023-01. Tenable has extracted the preceding description block...

CVE-2023-30624

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime's implementation of managing per-instance state, such as tables and memories, contains LLVM-level undefined behavior. This undefined behavior was found to cause runtime-level issues when compiled...

Undefined Behavior in Rust runtime functions

Impact Wasmtime's implementation of managing per-instance state, such as tables and memories, contains LLVM-level undefined behavior. This undefined behavior was found to cause runtime-level issues when compiled with LLVM 16 which causes some writes, which are critical for correctness, to be...

PT-2023-2564 · Illumina · Illumina Universal Copy Service

Name of the Vulnerable Software and Affected Versions: Illumina Universal Copy Service versions 2.x Description: The issue is related to the binding of Illumina Universal Copy Service to an unrestricted IP address, allowing an unauthenticated malicious actor to use the service to listen on all IP...

SUSE CVE-2023-25815

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the gettext function's implicit initialization no...

CVE-2023-26604 affecting package systemd 239-43

CVE-2023-26604 affecting package systemd 239-43. A patched version of the package is available...

WordPress Ebook Store Plugin <= 5.775 is vulnerable to Cross Site Scripting (XSS)

Software Ebook Store Type Plugin Vulnerable versions = 5.775 Fixed in 5.78 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-22690 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bf3f6e253a15 Credits yuyudhn Required privilege...