CVE-2023-0795

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0802

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

CVE-2022-23935

creationtimestamp| type| source ---|---|--- 2023-02-12 11:47:37+00:00| published-proof-of-concept| Telegram/CbElgwPMP2LIKnmo2t30Cv25j2V2UdZiklRAZXnOt8rE 2023-02-12 13:38:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7736 2023-02-12 15:32:23+00:00|...

[SECURITY] Fedora 36 Update: opusfile-0.12-9.fc36

libopusfile provides a high-level API for decoding and seeking within .opus files. It includes: Support for all files with at least one Opus stream including multichannel files or Ogg files where Opus is muxed with something else. Full support, including seeking, for chained files. A simple stere...

CVE-2023-22795

creationtimestamp| type| source ---|---|--- 2023-02-09 22:26:26+00:00| seen| https://t.me/cibsecurity/57872 2024-02-02 15:27:12+00:00| seen| https://t.me/ctinow/178108...

golang: regexp/syntax: limit memory used by parsing regexps

A flaw was found in the golang package, where programs that compile regular expressions from untrusted sources are vulnerable to memory exhaustion or a denial of service. The parsed regexp representation is linear in the input size. Still, in some cases, the constant factor can be as high as...

openssl-src subject to NULL dereference validating DSA public key

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...

CVE-2023-0217

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...

ALPINE-CVE-2023-0217

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...

CVE-2023-0217 NULL dereference validating DSA public key

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...

GHSA-R887-GFXH-M9RR mrpack-install vulnerable to path traversal with dependency

Impact Importing a malicious .mrpack file can cause path traversal while downloading files. This can lead to scripts or config files being placed or replaced at arbitrary locations, without the user noticing. Patches No patches yet. Workarounds Avoid importing .mrpack files from untrusted sources...

EulerOS 2.0 SP8 : rpm (EulerOS-SA-2023-1335)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a 'binding signature.' RPM does not check t...

`NULL` dereference validating DSA public key

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...

IBM Cloud Pak for Security Information Disclosure Vulnerability (CNVD-2023-07678)

IBM Cloud Pak for Security is an application from International Business Machines IBM, Inc. an open security platform that connects to your existing data sources to generate deeper insights and enables you to take automated actions faster.IBM Cloud Pak for Security CP4S versions 1.10.0.0 through...

NULL dereference validating DSA public key

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...

CVE-2023-25136

creationtimestamp| type| source ---|---|--- 2023-02-03 12:20:36+00:00| seen| https://t.me/cibsecurity/57445 2023-02-03 20:46:29+00:00| seen| https://t.me/ctinow/91254 2023-02-06 10:58:51+00:00| seen| https://t.me/thehackernews/3022 2023-02-06 13:34:29+00:00| seen| https://t.me/OpenHackChile/1714...

[SECURITY] Fedora 37 Update: mingw-opusfile-0.12-9.fc37

libopusfile provides a high-level API for decoding and seeking within .opus files. It includes: Support for all files with at least one Opus stream including multichannel files or Ogg files where Opus is muxed with something else. Full support, including seeking, for chained files. A simple stere...

CVE-2022-47002

creationtimestamp| type| source ---|---|--- 2023-02-01 16:14:06+00:00| seen| https://t.me/cibsecurity/57284 2023-03-13 13:17:14+00:00| published-proof-of-concept| Telegram/lcHBbc9djOcQxQTmmp71-eSQ4ti3SLrjevUGqO-YOEL5HdE 2023-12-21 12:18:50+00:00| seen| https://t.me/ctinow/157636 2024-09-27...

CVE-2023-23846

creationtimestamp| type| source ---|---|--- 2023-01-31 18:11:08+00:00| seen| https://t.me/ctinow/90366 2023-02-01 07:14:08+00:00| seen| https://t.me/cibsecurity/57250 2025-03-27 13:26:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9065...

CVE-2023-23924

creationtimestamp| type| source ---|---|--- 2023-01-31 13:33:16+00:00| published-proof-of-concept| https://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg 2023-02-01 05:35:13+00:00| seen| https://t.me/proxybar/1350 2023-02-01 18:35:28+00:00| published-proof-of-concept|...