MAL-2024-2889 Malicious code in pp-profile-widget (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

pp-s.jp Improper Access Control vulnerability OBB-3845480

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

yasm Security Vulnerabilities

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version v.1.3.0. An attacker can exploit this vulnerability to cause a denial of service via the newToken function in module/preprocs/nasm/nasm-pp:1512...

MAL-2024-80 Malicious code in pp-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80259057c4b53406f74c4212649b483cc008da900bdde58224869875f547873c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pp-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80259057c4b53406f74c4212649b483cc008da900bdde58224869875f547873c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Uncontrolled Resource Consumption ('Resource Exhaustion')

Overview Affected versions of this package are vulnerable to Uncontrolled Resource Consumption 'Resource Exhaustion' via the expandmmacparams function in the nasm-pp.c component. An attacker can cause a crash or disruption of service by sending crafted input. Remediation There is no fixed version...

CVE-2023-49558

An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expandmmacparams function in the modules/preprocs/nasm/nasm-pp.c component...

MAL-2023-8201 Malicious code in @zettle-bo/pp-profile-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1620f673435e4da925d2327f2d50d0ab0b66532cdb1d19d87accae90da85ac3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-31972

yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

AZL-26737 CVE-2023-31724 affecting package yasm 1.3.0-17

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function dodirective at /nasm/nasm-pp.c...

AZL-35385 CVE-2023-31724 affecting package yasm 1.3.0-17

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function dodirective at /nasm/nasm-pp.c...

CVE-2023-31723

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...

CVE-2023-31973

yasm v1.3.0 was discovered to contain a use after free via the function expandmmacparams at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

AZL-35380 CVE-2023-31972 affecting package yasm 1.3.0-17

yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

AZL-26635 CVE-2023-31974 affecting package yasm 1.3.0-17

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

AZL-26633 CVE-2023-31972 affecting package yasm 1.3.0-17

yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

PT-2023-23549 · Yasm +1 · Yasm +1

Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0 Description: The issue is related to a use after free via the function error at /nasm/nasm-pp.c. Note that multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...

yasm 资源管理错误漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A resource management error vulnerability exists in yasm v1.3.0, which stems from a post-release reuse issue in function ppgetline in /nasm/nasm-pp.c. The vulnerability is caused by the use of the function ppgetline in th...

yasm 安全漏洞

yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0.55.g101bc, which stems from a segmentation violation in the function deleteToken on /nasm/nasm-pp.c. The vulnerability is caused by an error in the function deleteToke...

pp-in.com Cross Site Scripting vulnerability OBB-3225101

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...