9933 matches found
PT-2023-15393 · Unknown · Siren Investigate
Name of the Vulnerable Software and Affected Versions: Siren Investigate versions prior to 12.1.7 Description: An issue was discovered that allows for an ACL bypass on global objects. Recommendations: For versions prior to 12.1.7, update to version 12.1.7 or later to resolve the issue...
CVE-2022-47543
An issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects...
CVE-2022-47543: Improper Access Control
An issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects...
CVE-2022-43573: Exposure of Sensitive Information to an Unauthorized Actor
IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to exposure of the name and email for the creator/modifier of platform level objects. IBM X-Force ID: 238678...
CVE-2022-47543
Siren Investigate contains a CVE-2022-47543 ACL bypass on global objects for versions before 12.1.7. Affected software: Siren Investigate (pre-12.1.7). Root cause: improper access control on global objects. Impact: limited integrity, potential exposure of global object access (as per CVSS 3.1 met...
Siren Investigate security vulnerabilities
Siren Investigate is a front-end to the Siren platform from Siren Ireland, allowing the creation of dashboards, charts, link analysis, alerts and more. A security vulnerability exists in Siren Investigate versions prior to 12.1.7 that stems from the presence of ACL bypasses on global objects...
PT-2025-37525
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the drm/amdgpu module related to the amddrm buddy fini function. A call trace warning is observed during the removal of the amdgpu driver, caused by...
GHSA-F8CC-G7J8-XXPM XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow
Impact The vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream. Patches XStream 1.4.20 handles the stack overflow and raises an InputManipulationException instead...
CVE-2022-41966
XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation the processed input stream. The attack uses the hash code implementation for...
@benjamin-vanryseghem/mongoose-dummy (>=1.0.7, <=1.0.9), @copart/lot-search-components (>=0.0.1, <=0.0.2) +31 more potentially affected by CVE-2020-36632 via flat (4.0.0)
flat NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flat and may be impacted: - @benjamin-vanryseghem/mongoose-dummy =1.0.7, =0.0.1, =0.0.2, =0.0.1, =0.1.0, =1.1.0, =0.0.1, =0.0.1, =1.0.2, =2.0.0, =0.1.1, =1.1.1, =2.5.0 and more Sour...
CVE-2022-43594
Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigger these...
Null pointer dereference
Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigger these...
CVE-2022-3032
When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...
CVE-2022-3032
When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...
CVE-2022-31745
If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firefox 101...
CVE-2022-22740
Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...
CVE-2022-1097
NSSToken objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...
OpenImageIO Project OpenImageIO Image Output Close denial of service vulnerability
Talos Vulnerability Report TALOS-2022-1653 OpenImageIO Project OpenImageIO Image Output Close denial of service vulnerability December 22, 2022 CVE Number CVE-2022-43594,CVE-2022-43595 SUMMARY Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageI...
CVE-2022-1097
NSSToken objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird 91.8, Firefox 99, and Firefox ESR 91.8...
CVE-2022-3032: Externally Controlled Reference to a Resource in Another Sphere
When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed...