CVE-2023-39562

GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gfbsalign function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted file...

CVE-2023-34758

Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses...

DLA-3546-1 opendmarc - security update

Bulletin has no description...

DLA-3545-1 flask-security - security update

Bulletin has no description...

OSV-2023-743 Out-of-memory in QueryParserFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61742 Crash type: Out-of-memory Crash state: QueryParserFuzzer...

CVE-2023-39742

giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c...

MAL-2023-1569 Malicious code in @dpdgroupuk/design-space-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e51ab6c7050e707d28d79d239a607feea9a777c9db5f9a4765ead15613168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1566 Malicious code in devops-challenge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae82cf2333c3027eb9266e05dfa4697724ae1623e3b662c2b129d5f716f55aa4 The OpenSSF Package Analysis project identified 'devops-challenge' @ 99.99.990 npm as malicious. It is considered malicious because: - The packa...

EPA expression to allow MAC OS versions

EPA Nfactor policy expression to allow MAC OS...

CVE-2021-40264

NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImageCloneTag function inFreeImageTag.cpp...

CVE-2022-28068

A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...

CVE-2022-34038

Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability...

CVE-2023-26469

In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server...

GHSA-8FP9-43PW-56VW PandasAI vulnerable to arbitrary code execution

An issue in pandas-ai v.0.8.1 and before allows a remote attacker to execute arbitrary code via the isjailbreak function...

DLA-3529-1 datatables.js - security update

Bulletin has no description...

PT-2023-26921 · Unknown · Servicewifiresources

Name of the Vulnerable Software and Affected Versions: ServiceWifiResources affected versions not specified Description: The issue is related to insecure signatures in the ServiceWifiResources module. Successful exploitation may cause ServiceWifiResources to be maliciously modified and overwritte...

CVE-2020-25915

Cross Site Scripting XSS vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via crafted userlogin...

OSV-2023-685 Invalid-free in reset_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61339 Crash type: Invalid-free Crash state: resetcontext cmtdecodeprometheuscreate cmetricsdecodefuzz.c...

EUVD-2023-41815

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Creative Solutions Contact Form Generator plugin = 2.5.5 versions...

GHSA-9RHF-Q362-77MX Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers

A vulnerability was identified in Consul such that using JWT authentication for service mesh incorrectly allows/denies access regardless of service identities. This vulnerability, CVE-2023-3518, affects Consul 1.16.0 and was fixed in 1.16.1...