Data leakage between instances in the pooling allocator

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-wh6w-3828-g9qf. For more information see the GitHub-hosted security advisory...

GHSA-8RWR-X37P-MX23 vulnerabilities

Vulnerabilities for packages: openssl-provider-fips, openssl...

GHSA-H8JM-2X53-XHP5 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-H8JM-2X53-XHP5 vulnerabilities

Vulnerabilities for packages: openssl...

MAL-2022-5622 Malicious code in rdocumentation-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5eca1c7e61ad7fe3e9bd189771149eeee1859356b1234ff3c84997abed24031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Duplicate Advisory: Improper Restriction of XML External Entity Reference in pikepdf

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29421, GHSA-ccgm-3xw4-h5p8. Reason: This candidate is a duplicate of CVE-2021-29421. Notes: All CVE users should reference CVE-2021-29421 instead of this candidate. All references and descriptions in this candidate have been removed to...

MAL-2022-456 Malicious code in @nexthink/apollo-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faa168f6a74af14b39193cdea04f9798ab2d20f8ad531d396b5207580e9fc5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-F4P5-X4VC-MH4V vulnerabilities

Vulnerabilities for packages: kubevela...

Grafana Privilege Escalation Vulnerability (GHSA-jv32-5578-pxjc)

Grafana is prone to a privilege escalation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

GHSA-69CH-W2M2-3VJP vulnerabilities

Vulnerabilities for packages: php-fpmexporter, kubeflow-fips, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, vt-cli, kube-state-metrics, k3d, terraform-provider-sendgrid, dynamic-localpv-provisioner, gitleaks, hey, kubeflow, grpcurl...

GHSA-69CH-W2M2-3VJP vulnerabilities

Vulnerabilities for packages: gitleaks, vt-cli, dynamic-localpv-provisioner, php-fpmexporter, terraform-provider-sendgrid, grpcurl, kubeflow, k3d, hey...

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8771 more potentially affected by CVE-2022-37603 via loader-utils (>=2.0.0, <=2.0.3)

loader-utils NPM version =2.0.0, =2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

GHSA-4F63-89W9-3JJV vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-4F63-89W9-3JJV vulnerabilities

Vulnerabilities for packages: openssl...

MyBB < 1.8.31 RCE Vulnerability (GHSA-hxhm-rq9f-7xj7)

MyBB is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

CVE-2022-39284

CodeIgniter 4 prior to v4.2.7 has a cookie handling bug where setting secure or HttpOnly (Config\Cookie) is not reflected in set_cookie() or Response::setCookie(), causing cookie values to be exposed to scripts. The vulnerability is limited to non-session cookies and does not affect sessions. Aff...

GHSA-H4H5-3HR4-J3G2 vulnerabilities

Vulnerabilities for packages: celeborn, druid, hadoop-client-modules, emsdk, trino...

Discourse 2.9.0.beta5 - 2.9.0.beta9 DoS Vulnerability

Discourse is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"...

GHSA-JJJH-JJXP-WPFF vulnerabilities

Vulnerabilities for packages: cassandra, cassandra-reaper, scala, management-api-for-apache-cassandra-5.0...

GHSA-JJJH-JJXP-WPFF vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, cassandra-reaper, spark, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, cassandra, scala...