20128 matches found
wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.
...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-50141)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50141 advisory. - In the Linux kernel, the following vulnerability has been resolved: ACPI: PRM: Find EFIMEMORYRUNTIME block f...
@agent_z/egg (>=1.0.0, <=1.0.2), @ccci/micro-server (>=1.0.57, <=1.0.132) +12 more potentially affected by CVE-2024-21548 via bun (>=0.5.9, <=1.1.29)
bun NPM version =0.5.9, =1.0.0, =1.0.57, =1.0.0, =0.0.0, =0.0.2, =0.0.19-beta.11, =0.0.3, =0.0.2, =0.0.3, =0.0.55, =0.0.4, =0.0.7 Source cves: CVE-2024-21548 Source advisory: SNYK:JS-BUN-8499549...
ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
...
CVE-2024-54490
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A local attacker may gain access to user's Keychain items...
CVE-2024-54490
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A local attacker may gain access to user's Keychain items...
CVE-2024-54490: Origin Validation Error
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A local attacker may gain access to user's Keychain items...
Medium: apr
Issue Overview: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr...
Huawei EulerOS: Security Advisory for docker-runc (EulerOS-SA-2024-2979)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: apr
Issue Overview: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr...
CVE-2024-54490
CVE-2024-54490 affects macOS Sequoia prior to 15.2, where a local attacker could gain access to a user’s Keychain items. The issue is fixed in macOS Sequoia 15.2 by enabling hardened runtime, per Apple/NVD entries. The NVD score indicates a local, low-complexity, low-privilege-access vector with ...
CVE-2024-54490
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A local attacker may gain access to user's Keychain items...
Security Bulletin: Multiple vulnerabilities affect IBM® Semeru Runtime
Summary This bulletin for IBM Semeru Runtime covers all applicable Java SE CVEs published by OpenJDK as part of their October 2024 Vulnerability Advisory, plus CVE-2024-10917 and CVE-2024-9143. For more information please refer to OpenJDK's October 2024 Vulnerability Advisory and the X-Force...
PT-2024-36356 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 Description: A local attacker may gain access to user's Keychain items. This issue was addressed by enabling hardened runtime. Recommendations: For versions prior to 15.2, update to macOS Sequoia 15.2 to resolve t...
Amazon Linux 2023 : apr, apr-devel (ALAS2023-2024-789)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-789 advisory. Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This...
cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)
cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VMQH-5232-V43R...
Security Bulletin: There are multiple vulnerabilities in IBM App Connect Enterprise due to IBM Semeru Runtime
Summary There are multiple vulnerabilities in IBM App Connect Enterprise due to IBM Semeru Runtime. Vulnerability Details CVEID:CVE-2024-21217 DESCRIPTION: An unspecified vulnerability in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition related to the Serialization...
firefox: thunderbird: Unhandled Exception in Add-on Signature Verification
The Mozilla Foundation's Security Advisory: The application can fail to account for exceptions thrown by the loadManifestFromFile method during add-on signature verification. This flaw is triggered by an invalid or unsupported extension manifest and could cause runtime errors that disrupt the...
