@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +52 more potentially affected by CVE-2023-26486 via vega-functions (>=5.5.0, <=5.12.1)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.6.2, =1.0.1, =1.4.2-pre.1, =1.5.1 and more Source cves: CVE-2023-26486 Source advisory: OSV:GHSA-4VQ7-882G-WCG4...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +52 more potentially affected by CVE-2023-26486 via vega-functions (>=5.5.0, <=5.12.1)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.6.2, =1.0.1, =1.4.2-pre.1, =1.5.1 and more Source cves: CVE-2023-26486 Source advisory: GHSA-4VQ7-882G-WCG4...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +52 more potentially affected by CVE-2023-26487 via vega-functions (>=5.5.0, <=5.12.1)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.6.2, =1.0.1, =1.4.2-pre.1, =1.5.1 and more Source cves: CVE-2023-26487 Source advisory: OSV:GHSA-W5M3-XH75-MP55...

@datatitian/vega (5.17.0), @ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9) +52 more potentially affected by CVE-2023-26487 via vega-functions (>=5.5.0, <=5.12.1)

vega-functions NPM version =5.5.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.7, =0.6.2, =1.0.1, =1.4.2-pre.1, =1.5.1 and more Source cves: CVE-2023-26487 Source advisory: GHSA-W5M3-XH75-MP55...

Spring Cloud Function for Azure Function

What is the Spring Cloud Function? Spring Cloud Function is a SpringBoot-based framework allowing users to concentrate on their business logic by implementing them as Java Functions i.e., Supplier, Function, Consumer. In turn the framework provides necessary abstraction to enable execution of the...

PT-2023-35592 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 4 crash has been reported. The crash involves the following functions: isvcd nal byte swap emulation, isvcd nal parse non vc...

openssl security and bug fix update

3.0.1-47.0.1 - Replace upstream references Orabug: 34340177 1:3.0.1-47 - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEMreadbioex Resolves: CVE-2022-4450 - Fixed...

CVE-2022-48284

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions...

CVE-2022-48284

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions...

Privilege escalation

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions...

PT-2023-9609 · Mariadb Foundation · Mariadb

Name of the Vulnerable Software and Affected Versions: MariaDB version 10.5 Description: The issue is related to a remote code execution vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement. This vulnerability is associated with insufficient input...

CVE-2022-48283

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions...

CVE-2022-48283

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions...

PT-2023-15663

Name of the Vulnerable Software and Affected Versions Huawei whole-home intelligence software affected versions not specified Description The issue is related to an Incorrect Privilege Assignment, which could allow attackers to access restricted functions if successfully exploited. Recommendation...

PT-2023-15662

Name of the Vulnerable Software and Affected Versions Huawei whole-home intelligence software affected versions not specified Description The issue is related to an Incorrect Privilege Assignment, which could allow attackers to access restricted functions if successfully exploited. Recommendation...

Huawei HiLink AI Life security vulnerability

Huawei HiLink AI Life is a whole-house smart solution from China's Huawei Huawei. Huawei HiLink AI Life suffers from an authorization issue vulnerability, which stems from a permission assignment error in the software, and can be exploited by an attacker to access restricted functionality...

CVE-2022-48284: Improper Privilege Management

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions...

CVE-2022-48283: Improper Privilege Management

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions...

OESA-2023-1117 apr security update

The mission of the Apache Portable Runtime APR project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of...

PT-2023-35532 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash involves the functions ndpi free flow data and ndpi fr...