org.jenkins-ci.plugins.workflow:workflow-multibranch (2.10-beta-1), org.jenkins-ci.plugins:branch-api (2.0.0-beta-1) +2 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.15)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch 2.10-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-multibranch (2.10-beta-1), org.jenkins-ci.plugins:branch-api (2.0.0-beta-1) +2 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.15)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch 2.10-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-multibranch (2.10-beta-1), org.jenkins-ci.plugins:branch-api (2.0.0-beta-1) +2 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.15)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch 2.10-beta-1 -...

CVE-2023-40354

An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create service" command line, but this password is then stored in cleartext in the resulting .cnf file under /var/lib/maxscale/maxscale.cnf.d. The fixed versions are 2.5.28, 6.4.9, 22.08....

CVE-2023-33953

A flaw was found in the gRPC lib. This vulnerability allows hpack table accounting errors that could lead to unwanted disconnects between clients and servers in exceptional cases. This issue leads to Unbounded memory buffering in the HPACK parser and Unbounded CPU consumption in the HPACK parser...

Advisory ROSA-SA-2023-2203

Software: python 2.7.5 OS: rosa-server79 packageevrstring: python-2.7.5-93.res7 CVE-ID: CVE-2023-24329 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A problem in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blacklisting methods by providing a URL that starts with empty...

Amazon Linux 2 : python-pip (ALAS-2023-2151)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2151 advisory. A vulnerability was found in the way the ipaddress python module computes hash values in the IPv4Interface and IPv6Interface classes. This flaw allows an attacker to create many dictionary entries, due to...

CVE-2023-34669

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cstemodules/system which can reboot the system...

Denial of service

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cstemodules/system which can reboot the system...

CVE-2023-34669

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cstemodules/system which can reboot the system...

CVE-2023-34669: Observable Discrepancy

TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cstemodules/system which can reboot the system...

GO-2023-1733 Timing attack from non-constant time scalar arithmetic in github.com/bnb-chain/tss-lib

Timing attack from non-constant time scalar arithmetic in github.com/bnb-chain/tss-lib...

GO-2023-1867 Replay attacks involving proofs in github.com/bnb-chain/tss-lib

Replay attacks involving proofs in github.com/bnb-chain/tss-lib...

CVE-2023-37766

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so...

Security Bulletin: IBM Match 360 is vulnerable to Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes (CVE-2020-14422)

Summary Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or...

CVE-2023-35165

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages "aws-cdk-lib" 2.0.0 until 2.80.0 and "@aws-cdk/aws-eks" 1.57.0 until 1.202.0, "eks.Cluster" and "eks.FargateCluste...

CVE-2023-35165: Incorrect Authorization

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...

urlnorm 安全漏洞

urlnorm is a URL normalization library for Rust open sourced by progscrape. A security vulnerability exists in urlnorm version 0.1.4 and earlier, which stems from a vulnerability that allows a regular expression denial of service ReDos via a crafted lib.rs URL...

@alliander-opensource/aws-jwt-sts (0.2.6), @almaclaine/cdk (>=0.0.3, <=0.0.19) +195 more potentially affected by CVE-2023-35165 via aws-cdk-lib (>=2.0.0, <=2.79.1)

aws-cdk-lib NPM version =2.0.0, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =5.0.0-beta.0, =3.0.0-ampgenconfig.0, =3.5.0-beta.0, =5.0.0-beta.0, =2.24.0-beta.0, =5.0.0-beta.0, =4.0.0-cdkv2.0, =5.3.3 and...

@alliander-opensource/aws-jwt-sts (0.2.6), @almaclaine/cdk (>=0.0.3, <=0.0.19) +195 more potentially affected by CVE-2023-35165 via aws-cdk-lib (>=2.0.0, <=2.79.1)

aws-cdk-lib NPM version =2.0.0, =0.0.3, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.0.0-ampgenconfig.0, =5.0.0-beta.0, =3.0.0-ampgenconfig.0, =3.5.0-beta.0, =5.0.0-beta.0, =2.24.0-beta.0, =5.0.0-beta.0, =4.0.0-cdkv2.0, =5.3.3 and...