UBUNTU-CVE-2023-34868

Jerryscript 3.0 commit 05dbbd1 was discovered to contain an Assertion Failure via the parserparseforstatementstart at jerry-core/parser/js/js-parser-statm.c...

UBUNTU-CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

UBUNTU-CVE-2023-3159

A use after free issue was discovered in driver/firewire in outboundphypacketcallback in the Linux Kernel. In this flaw a local attacker with special privilege may cause a use after free problem when queueevent fails...

UBUNTU-CVE-2023-26132

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

UBUNTU-CVE-2023-1428

There exists an vulnerability causing an abort to be called in gRPC. The following headers cause gRPC's C++ implementation to abort when called via http2: te: x x != trailers :scheme: x x != http, https grpclbclientstats: x x == anything On top of sending one of those headers, a later header must...

UBUNTU-CVE-2023-3012

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...

UBUNTU-CVE-2023-2662

In Xpdf 4.04 and earlier, a bad color space object in the input PDF file can cause a divide-by-zero...

UBUNTU-CVE-2023-31556

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...

UBUNTU-CVE-2023-32208

Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113...

UBUNTU-CVE-2023-31979

Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...

UBUNTU-CVE-2023-30406

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

UBUNTU-CVE-2023-29578

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::MP4StringProperty function at src/mp4property.cpp...

UBUNTU-CVE-2023-24288

A crafted save file can cause a buffer overrun in Simon Tathams Portable Puzzle Collection...

UBUNTU-CVE-2023-24286

A crafted save file can cause a buffer overrun in the Mosaic puzzle...

UBUNTU-CVE-2023-24284

A crafted save file can cause a buffer overrun in the Guess puzzle...

UBUNTU-CVE-2023-25514

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution,...

UBUNTU-CVE-2023-2004

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

UBUNTU-CVE-2023-29584

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp...

UBUNTU-CVE-2023-28464

hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...

UBUNTU-CVE-2023-25076

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...