4239 matches found
roaring-landmask (0.4.0) potentially affected by CVE-2022-4304 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-4304 Source advisory: OSV:RUSTSEC-2023-0007...
roaring-landmask (0.4.0) potentially affected by CVE-2023-0216 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0216 Source advisory: OSV:RUSTSEC-2023-0011...
roaring-landmask (0.4.0) potentially affected by CVE-2023-0215 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0215 Source advisory: OSV:RUSTSEC-2023-0009...
roaring-landmask (0.4.0) potentially affected by CVE-2023-0401 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0401 Source advisory: OSV:RUSTSEC-2023-0013...
roaring-landmask (0.4.0) potentially affected by CVE-2022-4203 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-4203 Source advisory: OSV:RUSTSEC-2023-0008...
roaring-landmask (0.4.0) potentially affected by CVE-2022-4450 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-4450 Source advisory: OSV:RUSTSEC-2023-0010...
roaring-landmask (0.4.0) potentially affected by CVE-2023-0286 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0286 Source advisory: OSV:RUSTSEC-2023-0006...
PT-2023-12319
Name of the Vulnerable Software and Affected Versions Dogecoin Core versions 1.14.3 and earlier Description An issue in the Dogecoin Project allows attackers to view sensitive information via the CWallet::CreateTransaction function. This issue is related to the src/wallet/wallet.cpp file...
PT-2023-12320
Name of the Vulnerable Software and Affected Versions Ravencoin Core versions 4.3.2.1 and earlier Description An issue in the src/wallet/wallet.cpp file allows attackers to view sensitive information via the CWallet::CreateTransactionAll function. Recommendations For Ravencoin Core versions 4.3.2...
CVE-2021-37492: Undefined Security Weakness
An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll function...
CVE-2021-37491: Undefined Security Weakness
An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction function...
Information disclosure
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the component User Information Handler. The manipulation leads to information disclosure. The attack may ...
CVE-2020-36660
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the component User Information Handler. The manipulation leads to information disclosure. The attack may ...
CVE-2020-36660: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the component User Information Handler. The manipulation leads to information disclosure. The attack may ...
Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers
The Mozilla Foundation Security Advisory describes this flaw as: A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers...
Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers
The Mozilla Foundation Security Advisory describes this flaw as: A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers...
Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers
The Mozilla Foundation Security Advisory describes this flaw as: A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers...
Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers
The Mozilla Foundation Security Advisory describes this flaw as: A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers...
Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers
The Mozilla Foundation Security Advisory describes this flaw as: A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers...
Amazon Linux 2022 : emacs, emacs-common, emacs-devel (ALAS2022-2023-277)
It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2023-277 advisory. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation o...