Lucene search
+L

3826 matches found

Github Security Blog
Github Security Blog
added 2023/06/28 10:49 p.m.41 views

OpenFGA vulnerable to denial of service due to circular relationship

Overview OpenFGA versions v1.1.0 and prior are vulnerable to a DoS attack when certain Check and ListObjects calls are executed against authorization models that contain circular relationship definitions. Am I Affected? You are affected by this vulnerability if you are using OpenFGA v1.1.0 or...

7.5CVSS6.3AI score0.01133EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2023/06/21 12:15 p.m.5 views

SUSE-SU-2023:2585-1 Security update for salt and python-pyzmq

This update for salt and python-pyzmq fixes the following issues: salt: - Update to Salt release version 3006.0 jscPED-4361 See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add...

7.2AI score
SaveExploits0References8
OSV
OSV
added 2023/06/21 11:54 a.m.5 views

SUSE-SU-2023:2581-1 Security update for salt

This update for salt fixes the following issues: - Update to Salt release version 3006.0 jscPED-4361 See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add python3-looseversion as new dependency...

7.2AI score
SaveExploits0References7
OSV
OSV
added 2023/06/21 10:37 a.m.13 views

SUSE-SU-2023:2096-2 Security update for netty, netty-tcnative

This update for netty, netty-tcnative fixes the following issues: netty: - Security fixes included in this version update from 4.1.75 to 4.1.90: CVE-2022-24823: Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files for Java 6 and lower in...

7.5CVSS6.6AI score0.01466EPSS
SaveExploits3References7
OSV
OSV
added 2023/06/14 6:15 p.m.2 views

DEBIAN-CVE-2023-2976

Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files...

7.1CVSS6.3AI score0.00248EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/14 6:15 p.m.8 views

AZL-27173 CVE-2023-2976 affecting package guava for versions less than 25.0-8

Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files...

7.1CVSS6.6AI score0.00248EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/14 6:15 p.m.12 views

AZL-43696 CVE-2023-2976 affecting package guava20 20.0-5

Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files...

7.1CVSS6.6AI score0.00248EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/14 6:15 p.m.6 views

UBUNTU-CVE-2023-2976

Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files...

7.1CVSS6.7AI score0.00248EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/06/14 12:0 a.m.7 views

pbJson 缓冲区错误漏洞

pbJson is an Inductive AS open source JSON library written in Java and compatible with progsbase. A security vulnerability exists in pbJson 0.4.0 and earlier versions that originated from allowing an attacker to cause a denial of service through the use of objects with cyclic dependencies...

7.5CVSS7.3AI score0.00732EPSS
SaveExploits1References1
Snyk
Snyk
added 2023/06/14 12:0 a.m.13 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. A vulnerability exists in .NET when processing malicious X.509 client certificates that may consume excessive CPU. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...

7.5CVSS7.8AI score0.02627EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2023/06/13 7:0 a.m.71 views

June 13, 2023—KB5027223 (OS Build 22000.2057)

None None...

9.8CVSS6.8AI score0.22133EPSS
SaveExploits2
NVD
NVD
added 2023/06/02 5:15 p.m.21 views

CVE-2023-25741

When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox 110...

6.5CVSS6.2AI score0.00767EPSS
SaveExploits1References4
OSV
OSV
added 2023/06/02 5:15 p.m.9 views

CVE-2023-25741

When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox 110...

6.5CVSS7AI score0.00767EPSS
SaveExploits1References4
Prion
Prion
added 2023/06/02 5:15 p.m.31 views

Cross site scripting

When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox 110...

4.3CVSS6.2AI score0.00767EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2023/06/02 12:0 a.m.71 views

CVE-2023-25741

When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox 110...

6.5CVSS8.3AI score0.00767EPSS
SaveExploits1
Cvelist
Cvelist
added 2023/06/02 12:0 a.m.42 views

CVE-2023-25741

When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility problems as well as this security concern, so the behavior was disabled until further review. This vulnerability affects Firefox 110...

7.5AI score0.00767EPSS
SaveExploits1References4
CVE
CVE
added 2023/06/02 12:0 a.m.139 views

CVE-2023-25741

The CVE-2023-25741 entry concerns Firefox (

6.5CVSS6AI score0.00767EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/05/31 12:0 a.m.32 views

SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2023:2329-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2329-1 advisory. - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers bsc1211430. Tenable has extracted the preceding...

6.5CVSS6.7AI score0.75116EPSS
SaveExploits0References4
Fedora
Fedora
added 2023/05/29 1:7 a.m.36 views

[SECURITY] Fedora 37 Update: bottles-51.6-1.fc37

Easily manage Wine prefix in a new way! Run Windows software and games on Linux. Features: Create bottles based on environments a set of rule and dependencies for better software compatibility Access to a customizable environment for all your experiments Run every executable .exe/.msi in your...

7.8CVSS7.6AI score0.0047EPSS
SaveExploits0
Fedora
Fedora
added 2023/05/29 1:7 a.m.49 views

[SECURITY] Fedora 38 Update: bottles-51.6-1.fc38

Easily manage Wine prefix in a new way! Run Windows software and games on Linux. Features: Create bottles based on environments a set of rule and dependencies for better software compatibility Access to a customizable environment for all your experiments Run every executable .exe/.msi in your...

7.8CVSS7.6AI score0.0047EPSS
SaveExploits0
Rows per page
Query Builder