3729 matches found
Malicious code in complier (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11333 Malicious code in complier (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11332 Malicious code in compilre (npm)
--- -= Per source details. Do not edit below this line.=-...
Undefined behaviour in `kvm_ioctls::ioctls::vm::VmFd::create_device`
An issue was identified in the VmFd::createdevice function, leading to undefined behavior and miscompilations on rustc 1.82.0 and newer due to the function's violation of Rust's pointer safety rules. The function downcasted a mutable reference to its struct kvmcreatedevice argument to an immutabl...
vue-i18n has cross-site scripting vulnerability with prototype pollution
Vulnerability type XSS Description vue-i18n can be passed locale messages to createI18n or useI18n. we can then translate them using t and $t. vue-i18n has its own syntax for local messages, and uses a message compiler to generate AST. In order to maximize the performance of the translation...
The vulnerability of the Intel Fortran Compiler Classic’s optimization compiler is related to an uncontrolled search path element, which allows a malicious actor to exploit their privileges.
The vulnerability of the Intel Fortran Compiler Classic optimization compiler is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of oneAPI DPC++/C++ compiler’s optimization compilers, related to an uncontrolled element in the search process, allows attackers to increase their privileges.
The vulnerability of oneAPI DPC++/C++ compiler optimizers is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Intel High Level Synthesis Compiler software lies in its uncontrolled search path, which allows attackers to exploit their privileges.
The vulnerability of Intel High Level Synthesis Compiler software is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2024-44308
A vulnerability was discovered in WebKitGTK's JIT compiler. Processing maliciously crafted web content may lead to arbitrary code execution. Mitigation Affected installations of Red Hat Enterprise Linux 7 can disable the JIT engine by setting the JavaScriptCoreUseJIT environment variable to 0...
Intel oneAPI Base Toolkit < 2024.2.0 Multiple Vulnerabilities
Multiple vulnerabilities exist in Intel oneAPI Base Toolkit versions prior to 2024.2.0. See vendor advisory for more details. - Uncontrolled search path for some Intel® Fortran Compiler Classic software before version 2021.13 may allow an authenticated user to potentially enable escalation of...
[SECURITY] Fedora 41 Update: llvm-test-suite-19.1.0-4.fc41
C/C++ Compiler Test Suite that is maintained as an LLVM sub-project. This te st suite can be run with any compiler, not just clang...
[SECURITY] Fedora 40 Update: llvm-test-suite-18.1.8-3.fc40
C/C++ Compiler Test Suite that is maintained as an LLVM sub-project. This te st suite can be run with any compiler, not just clang...
Ubuntu: Security Advisory (USN-7109-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7109-1 golang-1.18 vulnerabilities
Philippe Antoine discovered that Go incorrectly handled crafted HTTP/2 streams. An attacker could possibly use this issue to cause a denial of service. CVE-2022-41723 Marten Seemann discovered that Go did not properly manage memory under certain circumstances. An attacker could possibly use this...
USN-7109-1: Go vulnerabilities
Philippe Antoine discovered that Go incorrectly handled crafted HTTP/2 streams. An attacker could possibly use this issue to cause a denial of service. CVE-2022-41723 Marten Seemann discovered that Go did not properly manage memory under certain circumstances. An attacker could possibly use this...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Go vulnerabilities (USN-7109-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7109-1 advisory. Philippe Antoine discovered that Go incorrectly handled crafted HTTP/2 streams. An attacker could possibly use this...
CVE-2024-34028
Uncontrolled search path in some IntelR Graphics Offline Compiler for OpenCLTM Code software for Windows before version 2024.1.0.142, graphics driver 31.0.101.5445 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-34165
Uncontrolled search path in some IntelR oneAPI DPC++/C++ Compiler before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
