io.jenkins.blueocean:blueocean (>=1.0-alpha-3, <=1.0.0-b01), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-3, <=1.0.0-b01) +4 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-3, =1.0-alpha-3, =1.0-alpha-3,...

Red Database Audit Plugin Influence

The vulnerability of the audit plugin of the TracePluginImpl class within the TracePluginImpl module of the “Red Database” database management system relates to the possibility of assigning incorrect severity and facility parameters to certain events when these events are recorded in the OS syslo...

PT-2024-40838 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a security exception, with details provided in an OSS-Fuzz report. The crash state involves methods such as...

PT-2025-41089

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory-safety flaw exists in the extended Berkeley Packet Filter eBPF subsystem regarding how reference counts are acquired for objects after a failed tree insertion. The issue stems...

ch.qos.logback:logback-examples (0.9.11), org.coosproject.examples:ping-impl (>=1.0.0, <=1.3.1) potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.11)

ch.qos.logback:logback-classic MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.11 - org.coosproject.examples:ping-impl =1.0.0, =1.3.1 Source...

PT-2023-18169 · Google · Android

Name of the Vulnerable Software and Affected Versions: TelecomServiceImpl.java affected versions not specified Description: The issue is related to a missing permission check in the registerPhoneAccount function of TelecomServiceImpl.java, which could lead to local information disclosure. This...

CVE-2023-20965

In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

org.apache.bookkeeper.tests:stream-storage-integration-test (4.7.0), org.apache.bookkeeper:stream-storage-server (4.7.0) +1 more potentially affected by CVE-2023-38647 via org.apache.helix:helix-core (0.6.7)

org.apache.helix:helix-core MAVEN version 0.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.helix:helix-core and may be impacted: - org.apache.bookkeeper.tests:stream-storage-integration-test 4.7.0 -...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (2.2-beta-1)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 2.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1,...

CVE-2023-29578

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::MP4StringProperty function at src/mp4property.cpp...

CVE-2023-29578: Out-of-bounds Write

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::MP4StringProperty function at src/mp4property.cpp...

CVE-2023-29578

mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::MP4StringProperty function at src/mp4property.cpp...

PT-2023-22309

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via ffi cb impl wpwwwww at src/mjs ffi.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider disabling the ffi...

Ivanti Avalanche SQL注入漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. Ivanti Avalanche version 6.3.2.3490 suffers from a SQL injection vulnerability that stems from a crafted request in...

CVE-2023-21021

In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin user network settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

CVE-2023-1451

A vulnerability was found in MP4v2 2.1.2. It has been classified as problematic. Affected is the function mp4v2::impl::MP4Track::GetSampleFileOffset of the file mp4track.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the...

CVE-2023-1451: Improper Resource Shutdown or Release

A vulnerability was found in MP4v2 2.1.2. It has been classified as problematic. Affected is the function mp4v2::impl::MP4Track::GetSampleFileOffset of the file mp4track.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the...

PT-2023-35687

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash state includes functions such as ddsi type unref impl locked, ddsi type unref locked, and...

SUSE CVE-2015-1237

Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/renderframeimpl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages...

cr-api-client (>=1.9.1, <=5.1.7), drb-impl-image (>=1.0.0a3, <=1.0.0b2) +33 more potentially affected by CVE-2022-40897 via setuptools (44.0.0)

setuptools PYPI version 44.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cr-api-client =1.9.1, =1.0.0a3, =1.0.0b1, =1.0.2, =1.0.1, =4.9.0, =1.3.15.8, =0.6.2, =1.26.0, =1.26.0, =1.26.0, =1.28.0 and more Source cve...