CVE-2023-1989 affecting package kernel 5.10.174.1-1

CVE-2023-1989 affecting package kernel 5.10.174.1-1. A patched version of the package is available...

CVE-2022-4095 affecting package kernel 5.10.174.1-1

CVE-2022-4095 affecting package kernel 5.10.174.1-1. A patched version of the package is available...

CVE-2023-1252 affecting package kernel 5.10.174.1-1

CVE-2023-1252 affecting package kernel 5.10.174.1-1. A patched version of the package is available...

CVE-2021-45985 affecting package lua for versions less than 5.4.3-5

CVE-2021-45985 affecting package lua for versions less than 5.4.3-5. A patched version of the package is available...

CVE-2018-25032 affecting package boost for versions less than 1.76.0-3

CVE-2018-25032 affecting package boost for versions less than 1.76.0-3. A patched version of the package is available...

CVE-2023-1252 affecting package kernel for versions less than 5.15.107.1-2

CVE-2023-1252 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2023-1249 affecting package kernel for versions less than 5.15.107.1-2

CVE-2023-1249 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2022-3707 affecting package kernel for versions less than 5.15.107.1-2

CVE-2022-3707 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2022-4379 affecting package kernel for versions less than 5.15.107.1-2

CVE-2022-4379 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2023-30858 Denosaurs emoji has ReDoS vulnerability in `replace` function

The Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reTrimSpace regex has 2nd degree polynomial inefficiency, leading to a delayed response given a big payload. The issue has been patched in 0.3.0. As a workaround, avoid using the...

Fedora 38 : php-laminas-diactoros2 (2023-8cf8786a16)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8cf8786a16 advisory. Version 2.25.2 This release provides a patch for CVE-2023-29530 / GHSA-xv3h-4844-9h36 / LP2023-01. Tenable has extracted the preceding description block...

CVE-2023-30624

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime's implementation of managing per-instance state, such as tables and memories, contains LLVM-level undefined behavior. This undefined behavior was found to cause runtime-level issues when compiled...

Undefined Behavior in Rust runtime functions

Impact Wasmtime's implementation of managing per-instance state, such as tables and memories, contains LLVM-level undefined behavior. This undefined behavior was found to cause runtime-level issues when compiled with LLVM 16 which causes some writes, which are critical for correctness, to be...

PT-2023-2564 · Illumina · Illumina Universal Copy Service

Name of the Vulnerable Software and Affected Versions: Illumina Universal Copy Service versions 2.x Description: The issue is related to the binding of Illumina Universal Copy Service to an unrestricted IP address, allowing an unauthenticated malicious actor to use the service to listen on all IP...

SUSE CVE-2023-25815

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the gettext function's implicit initialization no...

CVE-2023-26604 affecting package systemd 239-43

CVE-2023-26604 affecting package systemd 239-43. A patched version of the package is available...

WordPress Ebook Store Plugin <= 5.775 is vulnerable to Cross Site Scripting (XSS)

Software Ebook Store Type Plugin Vulnerable versions = 5.775 Fixed in 5.78 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-22690 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bf3f6e253a15 Credits yuyudhn Required privilege...

CVE-2022-48424 affecting package kernel for versions less than 5.15.102.1-3

CVE-2022-48424 affecting package kernel for versions less than 5.15.102.1-3. A patched version of the package is available...

CVE-2023-29199 vm2 Sandbox escape vulnerability

There exists a vulnerability in source code transformer exception sanitization logic of vm2 for versions up to 3.9.15, allowing attackers to bypass handleException and leak unsanitized host exceptions which can be used to escape the sandbox and run arbitrary code in host context. A threat actor c...

WordPress WP Data Access 5.3.7 Privilege Escalation Vulnerability

The Wordfence team responsibly disclosed an authenticated Privilege Escalation vulnerability in the WP Data Access plugin. On April 5, 2023 the Wordfence Threat Intelligence team initiated the responsible disclosure process for a vulnerability we discovered in WP Data Access, a WordPress plugin...