4718 matches found
CVE-2023-0760 Heap-based Buffer Overflow in gpac/gpac
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV...
CVE-2023-0760
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV...
EulerOS 2.0 SP8 : device-mapper-multipath (EulerOS-SA-2023-1310)
According to the versions of the device-mapper-multipath packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with...
MAL-2023-741 Malicious code in recurly-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ca6dddb8bdc49e630a37b4ee55826687ad4a7a3453d16ec59b9674870c797fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in recurly-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ca6dddb8bdc49e630a37b4ee55826687ad4a7a3453d16ec59b9674870c797fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vpro-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f253aa388076bf368b5ac423864b7d018841dec34f8653f44275ebda501d6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-943 Malicious code in vpro-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f253aa388076bf368b5ac423864b7d018841dec34f8653f44275ebda501d6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
npm create-choo-electron 安全漏洞
npm create-choo-electron is a program from npm USA. It is used to create a new Choo Electron application. A security vulnerability exists in create-choo-electron, which stems from the devInstall function not validating user input...
CVE-2023-23143
Buffer overflow vulnerability in function avcparseslice in file mediatools/avparsers.c. GPAC version 2.3-DEV-rev1-g4669ba229-master...
CVE-2023-23143
GPAC multimedia framework (GPAC 2.3-DEV-rev1-g4669ba229-master) contains a buffer overflow in avc_parse_slice() inside media_tools/av_parsers.c. The CVE-2023-23143 issue has high impact (local access, requires user interaction per NVD) and may allow denial of service or arbitrary code execution. ...
DEBIAN-CVE-2023-0358
Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV...
UBUNTU-CVE-2023-0358
Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV...
Design/Logic Flaw
Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV...
CVE-2023-0358 Use After Free in gpac/gpac
Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV...
GSD-2023-1001602 orangefs: Fix sysfs not cleanup when dev init failed
orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...
GSD-2023-1001406 orangefs: Fix sysfs not cleanup when dev init failed
orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...
GSD-2023-1000682 orangefs: Fix sysfs not cleanup when dev init failed
orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
GSD-2023-1000377 btrfs: handle case when repair happens with dev-replace
btrfs: handle case when repair happens with dev-replace This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...
PT-2023-34730 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.337 Description: A potential memory leak issue was discovered in the pmu dev alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2023-33918 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a memory leak in the pnp alloc dev function. It was introduced in version v2.6.30 and fixed in version v6.0.16. The actual impact and attack plausibility have not yet...