4261 matches found
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: kube-bench, src, argo-workflows, kine, spicedb, kots, amass, step-ca, ferretdb, step, k3s, trillian, temporal-server, caddy...
GHSA-7JWH-3VRQ-Q3M8 vulnerabilities
Vulnerabilities for packages: argo-workflows, amass, trillian-fips, wavefront-collector-for-kubernetes, kots, kube-bench, step, caddy, argo-workflows-fips, k3s, caddy-fips, kine, step-ca, trillian, temporal-server, spicedb, ferretdb, falcosidekick-fips, kube-bench-fips, src, temporal-server-fips...
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: argo-workflows, amass, trillian-fips, wavefront-collector-for-kubernetes, kots, kube-bench, step, caddy, argo-workflows-fips, k3s, caddy-fips, kine, step-ca, trillian, temporal-server, spicedb, ferretdb, falcosidekick-fips, kube-bench-fips, src, temporal-server-fips...
openSUSE: Security Advisory for nodejs18 (SUSE-SU-2023:0419-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-1449: Improper Neutralization of Input During Web Page Generation
The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's msslide shortcode in all versions up to, and including, 3.9.10 due to insufficient input sanitization and output escaping on the 'src' user supplied attributes. This make...
CVE-2024-27508
Atheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c...
CVE-2024-27508: Missing Release of Memory after Effective Lifetime
Atheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c...
PT-2024-1908
Name of the Vulnerable Software and Affected Versions Kerberos 5 aka krb5 version 1.21.2 Description The issue is related to a memory leak in the /krb5/src/kdc/ndr.c component of the Kerberos 5 implementation. This memory leak vulnerability can be exploited by a remote attacker to cause a denial ...
CVE-2024-25763
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c...
PT-2024-21131
Name of the Vulnerable Software and Affected Versions openNDS version 10.2.0 Description The issue is related to a Use-After-Free condition via the /openNDS/src/auth.c file. Recommendations For openNDS version 10.2.0, consider disabling the authentication functionality temporarily until a patch i...
CVE-2024-21502: Use of Uninitialized Variable
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...
SUSE-SU-2024:0589-1 Security update for qemu
This update for qemu fixes the following issues: - CVE-2021-3638: hw/display/ati2d: Fix buffer overflow in ati2dblt bsc1188609 - CVE-2023-3180: virtio-crypto: verify src and dst buffer length for sym request bsc1213925 - CVE-2023-3354: io: remove io watch if TLS channel is closed during handshake...
CVE-2024-25385: Use After Free
An issue in flvmeta v.1.2.2 allows a local attacker to cause a denial of service via the flvmeta/src/flv.c:375:21 function in flvclose...
The vulnerability of the tftp_input() function in the src/tftp.c component of the TCP-IP Libslirp emulator allows a hacker to gain access to confidential data.
The vulnerability of the tftpinput function in the src/tftp.c component of the TCP-IP Libslirp emulator relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to confidential data...
Cross-site Scripting (XSS)
Overview markdown-to-jsx is a lightweight, customizable React markdown component. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in...
CVE-2024-25197: NULL Pointer Dereference
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent function at /src/layeredcostmap.cpp...
Medium: jtidy
Issue Overview: An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. CVE-2023-34623 Affected Packages: jtidy Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Vis...
CVE-2024-25201
Espruino 2v20 commit fcc9ba4 was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c...
