12166 matches found
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2522)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2509)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 22.04 LTS / 23.04 : LLVM Toolchain vulnerabilities (USN-6258-1)
The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6258-1 advisory. It was discovered that LLVM Toolchain did not properly manage memory under certain circumstances. If a user were tricked into opening a specially...
Stored html injection on segment name
Description I have found an HTML Injection vulnerability on your web application. HTML injection is a type of injection vulnerability that occurs when a user is able to control an input point and is able to inject arbitrary HTML code into a vulnerable web page. Note : I am recreating the report a...
Low: sqlite
Issue Overview: No CVE associated with this advisory Affected Packages: sqlite Issue Correction: Run dnf update sqlite --releasever 2023.1.20230725 or dnf update --advisory ALAS2023-2023-264 --releasever 2023.1.20230725 to update your system. More information on how to update your system can be...
CVE-2023-29934
A flaw was found in the llvm package. A segmentation fault via the mlir::Type::getDialect component may lead to a crash...
CVE-2023-29933
A flaw was found in the llvm package. A segmentation fault via the mlir::Block::getArgument component may lead to a crash...
CVE-2023-29932
A flaw was found in the llvm package. A segmentation fault via the mlir::IROperandmlir::OpOperand component may lead to a crash...
CVE-2023-29941
A flaw was found in the llvm package. A segmentation fault via the matchAndRewriteSortOpmlir::sparsetensor::SortOp component may lead to a crash...
CVE-2023-29942
A flaw was found in the llvm package. A segmentation fault via the mlir::Type::isamlir::LLVM::LLVMVoidType component may lead to a crash...
Envoy 资源管理错误漏洞
Envoy is an open source distributed proxy server. A resource management error vulnerability exists in Envoy that stems from a CORS filter will segment error and crash Envoy...
Segmentation Violation
ChakraCore is vulnerable to segmentation violation. The vulnerability is due to the Js::EntryPointInfo::HasInlinees function which results in an application crash in specific situations...
OSV-2023-604 Segv on unknown address in ucl_object_free_internal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60789 Crash type: Segv on unknown address Crash state: uclobjectfreeinternal uclparserfree ucladdstringfuzzer.c...
Citrix NetScaler ADC and Gateway Devices Under Attack: CISA Urges Immediate Action
The U.S. Cybersecurity and Infrastructure Security Agency CISA issued an advisory on Thursday warning that the newly disclosed critical security flaw in Citrix NetScaler Application Delivery Controller ADC and Gateway devices is being abused to drop web shells on vulnerable systems. "In June 2023...
Buffer Overflow
libasn1c.so is vulnerable to Stack-based buffer overflow. The vulnerability is due to vulnerable function genhashget which results in segmentation fault crashing of application while processing ASN.1 module files and producing the C++ compatible C source code which can be used to...
Amazon Linux 2 : fribidi (ALAS-2023-2116)
The version of fribidi installed on the remote host is prior to 1.0.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2116 advisory. A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially...
OSV-2023-583 Segv on unknown address in ucl_hash_destroy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60678 Crash type: Segv on unknown address Crash state: uclhashdestroy uclobjectdtorunrefsingle uclobjectdtorunref...
SUSE SLED15: gdk-pixbuf-loader-libheif / libheif-devel / libheif1 / etc (SUSE-SU-2023:2223-2)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2223-2 advisory. - CVE-2023-29659: Fixed segfault caused by divide-by-zero bsc1211174. Tenable has extracted the preceding...
