PT-2023-24202 · Unknown · Django-Ses

Name of the Vulnerable Software and Affected Versions: Django-SES versions prior to 3.5.0 Description: The django ses library, a mail backend for Django using AWS Simple Email Service, has a flaw in the verification of signed requests from AWS. The SESEventWebhookView class is intended to handle...

UBUNTU-CVE-2023-29549

Under certain circumstances, a call to the bind function may have resulted in the incorrect realm. This may have created a vulnerability relating to JavaScript-implemented sandboxes such as SES. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

PT-2023-5273

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 112 Firefox for Android versions prior to 112 Focus for Android versions prior to 112 Description The issue relates to a call to the bind function potentially resulting in the incorrect realm, which may create a...

PT-2025-49663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s SCSI subsystem, specifically within the ses enclosure data process function. This issue involves a slab-out-of-bounds read condition, potentially...

SUSE CVE-2014-6428

The dissectspdu function in epan/dissectors/packet-ses.c in the SES dissector in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not initialize a certain ID value, which allows remote attackers to cause a denial of service application crash via a crafted packet...

PT-2025-40228

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to SCSI subsystem session management. Specifically, an out-of-bounds read can occur within the ses intf remove function when the number of...

Hardening of TypedArrays with non-canonical numeric property names in SES

Impact What kind of vulnerability is it? Who is impacted? In Hardened JavaScript, programs can harden objects to safely share objects with co-tenant programs without risk of these other programs tampering with their API surface. Hardening does not guarantee that objects are pure or immutable, so ...

@agoric/access-token (>=0.4.16-dev-23c942c.0, <=0.4.16-dev.0), @agoric/assert (>=0.1.0, <=0.3.15-dev.2) +100 more potentially affected by unknown CVE via ses (>=0.0.1, <=0.15.24)

ses NPM version =0.0.1, =0.4.16-dev-23c942c.0, =0.1.0, =1.2.0, =1.3.0, =0.1.0, =0.10.8-dev.0, =0.2.0, =1.5.1, =0.5.6-dev-f662032.0, =0.0.1, =0.1.1, =0.0.9, =0.1.1, =0.2.0, =0.5.30-dev-fe997f2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WHPX-Q3RQ-W8JC...

GHSA-WHPX-Q3RQ-W8JC Hardening of TypedArrays with non-canonical numeric property names in SES

Impact What kind of vulnerability is it? Who is impacted? In Hardened JavaScript, programs can harden objects to safely share objects with co-tenant programs without risk of these other programs tampering with their API surface. Hardening does not guarantee that objects are pure or immutable, so ...

WordPress Ninja Libs Amazon SES plugin <= 0.0.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ninja Libs Amazon SES plugin versions = 0.0.9. Solution No patched version available...

WordPress Ninja Libs Amazon SES plugin <= 0.0.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ninja Libs Amazon SES plugin versions = 0.0.9. Solution No patched version available...

PT-2021-26869

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.258 Description A potential NULL pointer dereference issue was identified in the nfc genl dump ses done function. The actual impact and attack plausibility have not yet been proven. This issue was introduce...

PT-2021-26924

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.12 through 5.4.164 Description A potential NULL pointer dereference issue was identified in the nfc genl dump ses done function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-27056

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.12 through 5.15.7 Description The issue is related to a potential NULL pointer dereference in the nfc genl dump ses done function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-26849

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.293 Description The issue is related to a potential NULL pointer dereference in the nfc genl dump ses done function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-26832

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.295 Description: The issue concerns a potential NULL pointer dereference in the nfc genl dump ses done function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2021-26893

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.221 Description The issue is related to a potential NULL pointer dereference in the nfc genl dump ses done function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-26974

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.85 Description The issue concerns a potential NULL pointer dereference in the nfc genl dump ses done function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2024-11476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential NULL pointer dereference in the nfc genl dump ses done function. This function should check if the received argument is non-NULL because its allocatio...

Office 365 Phishing Campaign Abuses Stolen Amazon SES Token

A surge in spearphishing emails designed to steal Office 365 credentials include some that were rigged to look like they came from major brands, including Kaspersky. According to a Kaspersky security bulletin posted Monday, two phishing kits identified as “Iamtheboss” and “MIRCBOOT’ are being use...