Lucene search
+L

322 matches found

Github Security Blog
Github Security Blog
added 2022/07/21 10:34 p.m.54 views

Cranelift vulnerable to miscompilation of constant values in division on AArch64

Impact There was a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors could result in incorrect division results at runtime. The translation rules for constants did not take into account whether sign- or zero-extension should happen, which resulted in an...

7.5CVSS7.4AI score0.00791EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2022/07/21 10:34 p.m.68 views

GHSA-7F6X-JWH5-M9R4 Cranelift vulnerable to miscompilation of constant values in division on AArch64

Impact There was a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors could result in incorrect division results at runtime. The translation rules for constants did not take into account whether sign- or zero-extension should happen, which resulted in an...

5.9CVSS6.7AI score0.00791EPSS
SaveExploits1References5
OSV
OSV
added 2022/07/20 10:30 p.m.26 views

CVE-2022-31146 Use After Free in Wasmtime

Wasmtime is a standalone runtime for WebAssembly. There is a bug in the Wasmtime's code generator, Cranelift, where functions using reference types may be incorrectly missing metadata required for runtime garbage collection. This means that if a GC happens at runtime then the GC pass will...

6.4CVSS8.6AI score0.01111EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/07/18 12:0 a.m.18 views

Fedora: Security Advisory for golang-github-dave-jennifer (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2022/07/18 12:0 a.m.18 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/17 1:15 a.m.19 views

[SECURITY] Fedora 35 Update: golang-github-dave-jennifer-1.4.1-5.fc35

Jennifer is a code generator for Go...

9.3CVSS1.5AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/17 1:15 a.m.41 views

[SECURITY] Fedora 35 Update: act-1.6.0-6.fc35

The Automatic Component Toolkit ACT is a code generator that takes an instance of an Interface Description Language file and generates a thin C89-API, implementation stubs and language bindings of your desired software component...

9.3CVSS2.2AI score0.0995EPSS
SaveExploits4
OpenVAS
OpenVAS
added 2022/07/06 12:0 a.m.14 views

Fedora: Security Advisory for act (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2022/07/06 12:0 a.m.24 views

Fedora: Security Advisory for golang-github-dave-jennifer (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2022/07/06 12:0 a.m.20 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.9AI score0.0995EPSS
SaveExploits3References2
Fedora
Fedora
added 2022/07/04 1:35 a.m.14 views

[SECURITY] Fedora 36 Update: golang-github-dave-jennifer-1.4.1-5.fc36

Jennifer is a code generator for Go...

9.3CVSS8.3AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/04 1:35 a.m.42 views

[SECURITY] Fedora 36 Update: act-1.6.0-6.fc36

The Automatic Component Toolkit ACT is a code generator that takes an instance of an Interface Description Language file and generates a thin C89-API, implementation stubs and language bindings of your desired software component...

9.3CVSS8.3AI score0.0995EPSS
SaveExploits4
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:17 p.m.4 views

Malicious code in util-raml-code-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 799fc21544f2a219ef768485dd268c4ff8ce0c60253b674a5941ef22ad018be5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:10 p.m.3 views

Malicious code in random-vouchercode-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bbacfc884557460a66c2cfc6df6b2615f6de1009a2aa4305e728411f9212fcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.13 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.10 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/04/05 12:0 a.m.46 views

Debian DSA-5112-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5112 advisory. - Use after free in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially...

8.8CVSS7.7AI score0.0179EPSS
SaveExploits17References43
Veracode
Veracode
added 2022/04/04 5:9 p.m.20 views

Use After Free

chromium is vulnerable to use after free.The vulnerability exist in QR Code Generator...

8.8CVSS1.9AI score0.00867EPSS
SaveExploits1References4Affected Software2
Microsoft CVE
Microsoft CVE
added 2022/04/01 7:0 a.m.41 views

Chromium: CVE-2022-1127 Use after free in QR Code Generator

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00867EPSS
SaveExploits1
Kaspersky
Kaspersky
added 2022/04/01 12:0 a.m.56 views

KLA12495 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Portals can be...

8.8CVSS9.5AI score0.0179EPSS
SaveExploits15References27
Rows per page
Query Builder