CVE-2023-24286

CVE-2023-24286 is documented across several feeds as a buffer overrun/overflow in the Mosaic puzzle component when processing a crafted save file. The exact affected package names/versions are not consistently enumerated in the provided sources; Ubuntu/Debian mentions Mosaic puzzle with a crafted...

CVE-2023-24288

CVE-2023-24288 affects Simon Tatham’s Portable Puzzle Collection. Multiple connected sources identify a vulnerability where a crafted save file can cause a buffer overrun/overflow in the puzzle collection software. Ubuntu/Debian advisories explicitly tie this CVE to the Portable Puzzle Collection...

CVE-2023-24284

CVE-2023-24284 is a reserved entry with public details not initially provided, but connected documents reveal a concrete vulnerability: a crafted save file can cause a buffer overrun in the Guess puzzle across Linux/Ubuntu environments (notably Ubuntu packages). Multiple sources (Ubuntu CVE entry...

PT-2023-27910 · Cilium · Cilium

Name of the Vulnerable Software and Affected Versions: Cilium versions prior to 1.14.2 Cilium versions prior to 1.13.7 Cilium versions prior to 1.12.14 Description: An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace can affect traffic on an enti...

CVE-2023-4638

CVE-2023-4638 affects GitLab CE/EE (versions 13.3–16.1.4, 16.2.0–16.2.4, 16.3.0) where an unauthenticated/unauthorized user can fork a project outside of the current group due to improper permission validation. Impact includes potential privilege escalation or access to project data via misrouted...

CVE-2023-33858

CVE-2023-33858 is an cross-site scripting (XSS) vulnerability in IBM Business Automation Workflow. The IBM security bulletins detail that an attacker could embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected products include I...

CVE-2022-43739

IBM Security Verify Access OpenID Connect Provider container is affected by CVE-2022-43739, which could disclose information to a local user via log files, potentially aiding further attacks. Affected product: IBM Security Verify Access OIDC Provider container (all versions). Root cause: informat...

CVE-2023-40270

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-38831. Reason: This candidate is a reservation duplicate of CVE-2023-38831. Notes: All CVE users should reference CVE-2023-38831 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2023-32803

CVE-2023-32803 is referenced in multiple Amazon Linux advisories (ALAS/AL2) related to the ca-certificates package. The root cause is that an initial fix for CVE-2022-23491 did not properly remove root certificates from TrustCor, leaving the store vulnerable. Affected environments include Amazon ...

CVE-2023-39977

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3268. Reason: This candidate is a reservation duplicate of CVE-2023-3268. Notes: All CVE users should reference CVE-2023-3268 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2023-39552

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-0527. Reason: This candidate is a reservation duplicate of CVE-2023-0527. Notes: All CVE users should reference CVE-2023-0527 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2202-3602

CVE-2022-3602 is an OpenSSL OpenSSL 3.x risk (X.509 certificate verification buffer overrun). It was addressed by fixes in OpenSSL 3.0.7 and is discussed alongside CVE-2022-3786. Microsoft guidance notes that OpenSSL 3.0.x remains affected until patched; affected products include OpenSSL consumer...

CVE-2104-3465

The connected Mageia advisory MGASA-2014-0248 documents CVE-2104-3465 as a NULL pointer dereference in GnuTLS (gnutls_x509_dn_oid_name()) when parsing X.509 certificates with certain OIDs, potentially returning NULL and enabling a buffer overflow on the client during TLS/SSL handshakes, with a se...

CVE-2016-1000247

CVE-2016-1000247 affects mpg123/libmpg123: a flaw in the id3 tag processing code can cause a buffer over-read leading to a denial of service. Debian and Mageia advisories fix it by updating mpg123 packages (e.g., Debian 1.14.4-1+deb7u1). Ubuntu and OSV/NASL entries also reference the vulnerabilit...

CVE-2015-20170

CVE-2015-20170 concerns the mailcap.findmatch() function in Python where the second argument is not sanitized, enabling shell command injection. The CloudLinux update CLSA-2022:1658347112 states that CVE-2015-20170 has been fixed in Python (via a provided update). The connected document does not ...

CVE-2023-02121

Cisco security advisory CISCO-SA-ADEOS-MLAYECVK documents multiple command injection vulnerabilities in the restricted shell of Cisco EPNM, ISE, and Prime Infrastructure. An authenticated, local attacker could escape the restricted shell and gain root privileges on the underlying OS. Updates have...

CVE-2022-20565

CVE-2022-20565 appears in multiple VMware/EulerOS kernel advisories (EulerOS-SA-2023-2184, EulerOS-SA-2023-2252) and in Nessus/OpenVAS feeds as part of Linux kernel issues. The documents indicate a critical vulnerability affecting the Linux kernel’s Cache Handler (exact affected version and produ...

A malicious user can steal a reserved token by using shift() function of Well.sol if the well was added liquidity unsafely with zero amount of the one of tokens.

Lines of code Vulnerability details Impact A malicious user can steal a reserved token by using shift function of Well.sol if the well was added liquidity unsafely with zero amount of the one of tokens. Proof of Concept Let's assume the well with WETH and USDC tokens. Currently totalSupply is zer...

CVE-2023-35935

CVE-35935 is a reservation duplicate of CVE-2023-31999. The active vulnerability details concern all versions of @fastify/oauth2 using a statically generated OAuth2 state parameter at startup, reused across requests for all users, enabling CSRF. The issue is fixed in newer releases (e.g., v7.2.0)...

CVE-2023-3327

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...