BELL-CVE-2017-10784 CVE-2017-10784 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2022-2319 CVE-2022-2319 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2018-14880 CVE-2018-14880 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2022-28738 CVE-2022-28738 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2014-0138 CVE-2014-0138 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2019-2805 CVE-2019-2805 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2019-2974 CVE-2019-2974 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2018-0732 CVE-2018-0732 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2021-20285 CVE-2021-20285 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2017-12186 CVE-2017-12186 does not affect BellSoft software

Bulletin has no description...

DEBIAN-CVE-2023-40030

Cargo downloads a Rust project’s dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not escape Cargo feature names when including them in the report generated by cargo build --timings. A malicious package included as a dependency may inject nearly arbitrar...

CVE-2023-28159

The fullscreen notification could have been hidden on Firefox for Android by using download popups, resulting in potential user confusion or spoofing attacks. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 111...

PT-2023-24215 · Discord · Discord

Name of the Vulnerable Software and Affected Versions: tgstation-server affected versions not specified Description: The issue concerns the DreamMaker API DMAPI chat channel cache in tgstation-server, which can be poisoned upon a restart and reattach of the server. This can lead to chat messages...

golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results

A flaw was found in the crypto/internal/nistec golang library. The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars, such as a scalar larger than the order of the curve. This does not impact usages of crypto/ecds...

PT-2023-23000

Name of the Vulnerable Software and Affected Versions ESPv2 versions 2.20.0 through 2.42.0 Description The issue allows API clients to bypass JWT authentication by crafting a malicious X-HTTP-Method-Override header value under specific conditions. This occurs when the requested HTTP method is not...

Memory corruption

Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomicserver. NOTE: installations with brpc-0.14.0 and later are unaffected...

AZL-78976 CVE-2023-24532 affecting package golang 1.25.7-1

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars a scalar larger than the order of the curve. This does not impact usages of crypto/ecdsa or crypto/ecdh...

AZL-37373 CVE-2023-24532 affecting package golang for versions less than 1.21.6-1

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars a scalar larger than the order of the curve. This does not impact usages of crypto/ecdsa or crypto/ecdh...

UBUNTU-CVE-2023-24532

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars a scalar larger than the order of the curve. This does not impact usages of crypto/ecdsa or crypto/ecdh...

SUSE CVE-2023-24532

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars a scalar larger than the order of the curve. This does not impact usages of crypto/ecdsa or crypto/ecdh...