CVE-2023-1157 finixbit elf-parser elf_parser.cpp get_segments denial of service

A vulnerability, which was classified as problematic, was found in finixbit elf-parser. Affected is the function elfparser::Elfparser::getsegments of the file elfparser.cpp. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclos...

CVE-2023-1157

The CVE-2023-1157 issue affects finixbit elf-parser, specifically the function elf_parser::Elf_parser::get_segments in elf_parser.cpp. The manipulation leads to a denial of service and requires local access. Exploitation details have been disclosed publicly, but the initial document provides no v...

Integer overflow

A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializetypedarrayfromarraybuffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the publ...

The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to deficiencies in the authentication process, allows attackers to increase their privileges.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

CVE-2023-1005

A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery...

Code injection

A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery...

CVE-2023-1005 JP1016 Markdown-Electron code injection

A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery...

GHSA-WR8H-W969-36M8 GoPistolet vulnerable to Improper Resource Shutdown or Release

A vulnerability was found in GoPistolet. It has been declared as problematic. This vulnerability affects unknown code of the component MTA. The manipulation leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor...

CVE-2015-10085

A vulnerability was found in GoPistolet. It has been declared as problematic. This vulnerability affects unknown code of the component MTA. The manipulation leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor...

CVE-2015-10085 GoPistolet MTA denial of service

A vulnerability was found in GoPistolet. It has been declared as problematic. This vulnerability affects unknown code of the component MTA. The manipulation leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor...

CVE-2015-10085 GoPistolet MTA denial of service

A vulnerability was found in GoPistolet. It has been declared as problematic. This vulnerability affects unknown code of the component MTA. The manipulation leads to denial of service. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor...

PT-2023-10264 · Unknown · Gopistolet

Name of the Vulnerable Software and Affected Versions: GoPistolet affected versions not specified Description: A vulnerability was found in GoPistolet, affecting unknown code of the component MTA, leading to denial of service. The product uses continuous delivery with rolling releases, and...

CVE-2016-15024

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. Continiou...

Information disclosure

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. Continiou...

CVE-2016-15024 doomsider shadow denial of service

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. Continiou...

CVE-2023-23947

Argo CD suffers an improper authorization vulnerability (CVE-2023-23947) affecting versions starting with 2.3.0-rc1 up to before 2.3.17, and including 2.4.23, 2.5.11, and 2.6.2. An attacker who can update at least one cluster secret can update any cluster secret, enabling privilege escalation or ...

The vulnerability of the declarative delivery tool for GitOps in Kubernetes Argo CD allows attackers to increase their privileges.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

CVE-2023-25163 Argo CD leaks repository credentials in user-facing error messages and in logs

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-rc1 have an output sanitization bug which leaks repository access credentials in error messages. These error messages are visible to the user, and they are logged. The error...

CVE-2023-25163

CVE-2023-25163 affects Argo CD (kubernetes GitOps tool). All versions starting with v2.6.0-rc1 have an output sanitization bug that leaks repository access credentials in error messages, which are visible to users and logged. The vulnerability can be triggered when creating/updating an Applicatio...

Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands may be vulnerable to denial of service due to [CVE-2022-32189]

Summary Some components of IBM App Connect Enterprise Certified Container operator and operands are implemented in Golang Go. These components may be vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in Golang Go. CVE-2022-32189...