5014 matches found
Emby Server Proxy Header Spoofing Vulnerability (GHSA-fffj-6fr6-3fgf)
Emby Server is prone to a proxy header spoofing vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:emby:emby.releases...
elFinder < 2.1.62 Path Traversal Vulnerability (GHSA-wm5g-p99q-66g4)
elFinder is prone to a path traversal vulnerability in the PHP LocalVolumeDriver connector. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
Duplicate Advisory: Cosmos "Barberry" vulnerability in github.com/cosmos/cosmos-sdk
Withdrawn This advisory has been withdrawn because it is a duplicate of GHSA-j2cr-jc39-wpx5. This link is maintained to preserve external references. Original Description The cosmos-sdk module is affected by the vulnerability codenamed "Barberry"...
MAL-2023-209 Malicious code in couchcache-audit (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8f29bc9b9299e2320b971e1a84be244017e82f839d86bacd6894182b8699c411 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles
Impact The 1.4.0 release includes a regression on the filesystem scope check for dotfiles on Linux and macOS. Previously dotfiles eg. $HOME/.ssh/ were not implicitly allowed by the glob wildcard scopes eg. $HOME/, but a regression was introduced when a configuration option for this behavior was...
GHSA-C2QF-RXJJ-QQGW vulnerabilities
Vulnerabilities for packages: arangodb...
MAL-2023-107 Malicious code in assets-graph (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx e513e7556846ca62fa4d27646eef928d55f2c2954ce9caa51dd63643e2adf445 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
GHSA-6MJQ-H674-J845 vulnerabilities
Vulnerabilities for packages: cloudwatch-exporter, wavefront-proxy...
GHSA-6MJQ-H674-J845 vulnerabilities
Vulnerabilities for packages: cloudwatch-exporter, wavefront-proxy...
MAL-2023-153 Malicious code in cache-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 967892bb014a13ae52c15c89a3f5ebbdc8e841bf2fd8dbe6502400f91357503d Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-697 Malicious code in price-record (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3b87630cf8eb8594e67451df7fae7627d35da7c1f67a44b1751201766dbe54a0 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-755 Malicious code in sample-app-typescript (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a7432b767dd8bf532a686b3a40add828170682af3dcfdcab09c7d7a012a83e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-GQ98-53RQ-QR5H vulnerabilities
Vulnerabilities for packages: k3d...
GHSA-XHG5-42RF-296R vulnerabilities
Vulnerabilities for packages: zot...
GHSA-C57C-7HRJ-6Q6V vulnerabilities
Vulnerabilities for packages: k3d...
GHSA-5CPQ-8WJ7-HF2V vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, conda, mitmproxy...
Malicious code in firtssocketia2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c353cdf21295452aa2f8e354ed809efa2c6de59ae16de599dd2c41dc554e0954 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-32307
Sofia-SIP (SIP UAs) has CVE-2023-32307 describing multiple vulnerabilities in STUN packet handling, including heap overflow and OOB read caused by missing attributes length checks. Attacks could crash or cause high memory usage; these issues were addressed in version 1.13.15, with upgrades advise...
Fedora 37 : python-starlette (2023-b082504356)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b082504356 advisory. Backport patch for GHSA-v5gw-mw7f-84px Path traversal vulnerability in StaticFiles. Tenable has extracted the preceding description block directly from the...