GHSA-XQJR-WFX3-GMXV ArrayQueue's push_front is not panic-safe

The safe API arrayqueue::ArrayQueue::pushfront can lead to deallocating uninitialized memory if a panic occurs while invoking the clone method on the passed argument. Specifically, pushfront receives an argument that is intended to be cloned and pushed, whose type implements the Clone trait...

ArrayQueue's push_front is not panic-safe

The safe API arrayqueue::ArrayQueue::pushfront can lead to deallocating uninitialized memory if a panic occurs while invoking the clone method on the passed argument. Specifically, pushfront receives an argument that is intended to be cloned and pushed, whose type implements the Clone trait...

Linux Distros Unpatched Vulnerability : CVE-2023-4515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed ksmbd: validate command payload...

CVE-2025-8447

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to any repository to retrieve limited code content from another repository by creating a diff between the repositories. To exploit this vulnerability, an attacker needed to know the...

Linux Distros Unpatched Vulnerability : CVE-2022-35434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jpeg-quantsmooth before commit 8879454 contained a floating point exception FPE via /jpeg- quantsmooth/jpegqs+0x4f5d6c. CVE-2022-35434 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2023-4522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing t...

Linux Distros Unpatched Vulnerability : CVE-2024-6389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab-CE/EE affecting all versions starting with 17.0 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. An attacker as a...

Linux Distros Unpatched Vulnerability : CVE-2022-35045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0d63. CVE-2022-35045 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2022-35047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05aa. CVE-2022-35047 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2022-35068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e420d. CVE-2022-35068 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2022-35054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6171b2. CVE-2022-35054 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2022-35032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f. CVE-2022-35032 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-35063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e41a8. CVE-2022-35063 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2022-35024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a segmentation violation via /multiarch/memmove-vec- unaligned-erms.S. CVE-2022-35024 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2022-35050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b04de. CVE-2022-35050 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2022-35046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0466. CVE-2022-35046 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2022-36186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gffilterpidsetpropertyfull at filtercore/filterpid.c:5250,whi...

Linux Distros Unpatched Vulnerability : CVE-2024-45403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When h2o is configured as a reverse proxy and HTTP/3 requests are cancelled by the client, h...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal via insufficient validation in the getConfigFile function in the UIConfigRest class. An attacker can gain unauthorized access to files located in directories that share a common prefix with the intended folder by...

Linux Distros Unpatched Vulnerability : CVE-2020-24978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NASM 2.15.04rc3, there is a double-free vulnerability in pptokline asm/preproc.c. This is fixed in commit 8806c3ca007b84accac21dd88b900fb03614ceb7...