18220 matches found
Fedora: Security Advisory for dr_libs (FEDORA-2023-c21ec99091)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for dr_libs (FEDORA-2023-494ae331b6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for dr_libs (FEDORA-2023-9b87fb6b07)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: dr_libs-0^20230324git4b3d078-0.1.fc36
Single-file audio decoding libraries for C/C++...
CVE-2023-2222
A vulnerability was found in binutils, where SEGV of objdump caused by READ memory access at concatfilename at dwarf2.c...
[SECURITY] Fedora 37 Update: dr_libs-0^20230324git4b3d078-0.1.fc37
Single-file audio decoding libraries for C/C++...
[SECURITY] Fedora 38 Update: dr_libs-0^20230324git4b3d078-0.1.fc38
Single-file audio decoding libraries for C/C++...
Arbitrary Code Execution in Apache BRPC
Description BRPC is an Industrial-grade RPC framework using C++ Language, which is often used in high performance system such as Search, Storage, Machine learning, Advertisement, Recommendation etc. In server.cpp there are function call to wordexp, it used for expanding path from user input. Due ...
SUSE-SU-2023:1924-1 Security update for nodejs16
This update for nodejs16 fixes the following issues: Update to nodejs LTS version 16.20.0: Security fixes: - CVE-2022-25881: Fixed ReDoS vulnerability in http-cache-semantics bsc1208744. Other changes: - update undici to 5.20.0 - update c-ares to 1.19.0 - update npm to 8.19.4...
SUSE-SU-2023:1923-1 Security update for nodejs16
This update for nodejs16 fixes the following issues: Update to nodejs LTS version 16.20.0: Security fixes: - CVE-2022-25881: Fixed ReDoS vulnerability in http-cache-semantics bsc1208744. Other changes: - update undici to 5.20.0 - update c-ares to 1.19.0 - update npm to 8.19.4...
AZL-26339 CVE-2023-28327 affecting package kernel for versions less than 5.15.111.1-1
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unixdiaggetexact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service...
Oracle MySQL ODBC and C++ Connectors (Apr 2023 CPU)
The versions of MySQL ODBC or C++ Connectors installed on the remote host are affected by a vulnerability in the OpenSSL component as referenced in the April 2023 CPU advisory. Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows unauthenticated...
CVE-2023-21918
Vulnerability in the Oracle Database Recovery Manager component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having Local SYSDBA privilege with network access via Oracle Net to compromise Oracle...
Oracle Database Server 安全漏洞
Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server version 19c, version 21c. An...
Bento4 Denial of Service Vulnerability (CNVD-2023-69815)
Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 v1.6.0-639, which stems from an out-of-memory issue in the mp42avc component. An attacker can exploit this vulnerability to cause a denial of service...
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in the WordPress plugin User Submitted Posts, which is caused by incorrect validation of file extensions by the usp_check_images function. An attacker can exploit this vulnerability to upload malicious files and execute arbitrary code on a vulnerable system.
Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version v1.6.0-639, which stems from the AP4TrunAtom::SetDataOffsetint function in Ap4TrunAtom.h containing a segmentation violation. An attacker can exploit this vulnerabili...
protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.
...
CVE-2022-4904 affecting package c-ares for versions less than 1.19.0-1
CVE-2022-4904 affecting package c-ares for versions less than 1.19.0-1. An upgraded version of the package is available that resolves this issue...
Fedora: Security Advisory for libyang (FEDORA-2023-93d978c182)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...