dagster-mlflow (>=0.19.11, <=0.21.4), databricks-session (0.1.9) +14 more potentially affected by CVE-2023-4033 via mlflow (1.27.0)

mlflow PYPI version 1.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.19.11, =0.3.0, =0.0.4.dev3, =3.0.1, =4.0.2, =0.1.0, =3.2.18, =0.1.0, =0.0.1.dev202206240024, =0.1.0, =0.1.5 and more Source cves:...

PT-2023-4289 · Arm +2 · Amd Processors +1

Name of the Vulnerable Software and Affected Versions: AMD processors affected versions not specified ARM processors affected versions not specified Intel processors affected versions not specified Description: A potential power side-channel vulnerability may allow an authenticated attacker to...

com.hcl.commerce:commerce-search-processors (>=9.1.12.0, <=9.1.15.0), org.apache.nifi.minifi:minifi-assembly (>=1.14.0, <=1.22.0) +7 more potentially affected by CVE-2023-36542 via org.apache.nifi:nifi-standard-processors (>=0.0.2-incubating, <=1.22.0)

org.apache.nifi:nifi-standard-processors MAVEN version =0.0.2-incubating, =9.1.12.0, =1.14.0, =1.14.0, =1.14.0, =0.0.2-incubating, =1.15.0, =1.14.0, =1.22.0 - org.apache.plc4x:plc4j-nifi-plc4x-nar 0.10.0 - org.apache.plc4x:plc4j-nifi-plc4x-processors 0.10.0 Source cves: CVE-2023-36542 Source...

Security Processor Component Google Chrome OS DoS

The vulnerability of the Security Processor component in Google Chrome’s Chrome OS lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

EulerOS Virtualization 3.0.6.6 : edk2 (EulerOS-SA-2023-2443)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 &...

USN-6244-1 amd64-microcode vulnerability

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information...

LSN-0096-1: Kernel Live Patch Security Notice

It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform data buffer size validation in some situations. A physically proximate attacker could use this to craft a malicious USB device that when inserted, could cause a denial of service system crash ...

SUSE CVE-2023-34966

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop did not validate a field in the network packet that contains the count of elements in an array-like...

Espressif ESP32 安全漏洞

The Espressif ESP32 is a microcontroller from China Loxin Information Technology Espressif. A security vulnerability exists in the Espressif ESP32 3.0 ESP32rev300 ROM, which arises from an EMFI attack on the ECO3 that is capable of affecting CPU context-level PC values, regardless of secure boot...

USN-6221-1: Linux kernel vulnerabilities

It was discovered that a race condition existed in the overlay file system implementation in the Linux kernel. A local attacker could use this to cause a denial of service system crash. CVE-2021-20321 It was discovered that the virtual terminal vt device implementation in the Linux kernel contain...

CVE-2023-20575

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information...

CVE-2023-20575

CVE-2023-20575 describes a potential power side-channel vulnerability in some AMD processors that could allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM , potentially leaking sensitive information. The AMD security bull...

Ubuntu: Security Advisory (USN-6205-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.0), org.graylog.plugins:usage-statistics (2.1.0) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.1.0)

org.graylog2:graylog2-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.0 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:graylog-plugin-parent (2.2.0-beta.6), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-beta.6) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.2.0-beta.6)

org.graylog2:graylog2-server MAVEN version 2.2.0-beta.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-beta.6 -...

org.graylog.plugins:graylog-plugin-parent (2.2.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.2.1)

org.graylog2:graylog2-server MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.1 - org.graylog.plugins:graylog-plugin-pipeline-processor...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.2), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.2) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-alpha.2)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.2 -...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.3), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.3) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.3 -...

org.graylog.plugins:graylog-plugin-parent (2.3.0-rc.2), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-rc.2) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-rc.2)

org.graylog2:graylog2-server MAVEN version 2.3.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-rc.2 -...

org.graylog.plugins:graylog-plugin-parent (2.3.0), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0)

org.graylog2:graylog2-server MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0 - org.graylog.plugins:graylog-plugin-pipeline-processor...