CVE-2023-34059

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs...

GLSA-202310-14 : libinput: format string vulnerability when using xf86-input-libinput

The remote host is affected by the vulnerability described in GLSA-202310-14 libinput: format string vulnerability when using xf86-input-libinput - A format string vulnerability was found in libinput CVE-2022-1215 Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2023-34059

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs...

UBUNTU-CVE-2023-34059

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs...

Ubuntu 16.04 ESM : Crypto++ vulnerability (USN-4827-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4827-1 advisory. It was discovered that Crypto++ mishandled certain input. An attacker could use this vulnerability to leak potentially sensitive information. Tenable has extracte...

UBUNTU-CVE-2023-5595

Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-5595

Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...

Denial of service

Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-5595 Denial of Service in gpac/gpac

Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...

MAL-2023-8384 Malicious code in kempremium-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ce69947fee989e38a8cb1396ceaf8b70bd343327c511cf946c8c9f4a3f364d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kempremium-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ce69947fee989e38a8cb1396ceaf8b70bd343327c511cf946c8c9f4a3f364d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Null pointer dereference

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-5586 NULL Pointer Dereference in gpac/gpac

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-5586 NULL Pointer Dereference in gpac/gpac

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV...

GPAC Code Issue Vulnerability

GPAC is an open source multimedia framework. A code issue vulnerability exists in versions prior to GPAC 2.3.0-DEV that stems from the presence of a NULL pointer dereference...

4 heap-buffer-overflow in MP4Box

Description 4 heap-buffer-overflow in MP4Box Version $ ./MP4Box -version MP4Box - GPAC version 2.3-DEV-rev566-g50c2ab06f-master Platform $ uname -a Linux user-GE40-2PC-Dragon-Eyes 6.2.0-33-generic 3322.04.1-Ubuntu SMP PREEMPTDYNAMIC Thu Sep 7 10:33:52 UTC 2 x8664 x8664 x8664 GNU/Linux Reproduce...

NULL Pointer Dereference in function gf_filter_pck_new_alloc_internal

Description NULL Pointer Dereference in function gffilterpcknewallocinternal at filtercore/filterpck.c:108. Version git log commit 5692dc729491805e0e5f55c21d50ba1e6b19e88e HEAD - master, origin/master, origin/HEAD Author: Aurelien David Date: Wed Oct 11 13:24:46 2023 +0200 ac3dmx: add remain size...

heap-buffer-overflow in ac3dmx_process

Description Heap-buffer-overflow in ac3dmxprocess at filters/reframeac3.c:489. version git log commit 5692dc729491805e0e5f55c21d50ba1e6b19e88e HEAD - master, origin/master, origin/HEAD Author: Aurelien David Date: Wed Oct 11 13:24:46 2023 +0200 ac3dmx: add remain size check fixes 2627 ./MP4Box...

Malicious code in liblapack-dev (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 01a9f7fec70ee10cd7862c22e2c8257811997655e86e342b7bf61d0bd2b95154 The OpenSSF Package Analysis project identified 'liblapack-dev' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : CUE vulnerability (USN-6423-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6423-1 advisory. It was discovered that CUE incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information or...