AZL-43717 CVE-2022-25883 affecting package js-jquery 3.5.0-4

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...

AZL-44694 CVE-2022-25883 affecting package js-jquery 3.5.0-4

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...

AZL-45168 CVE-2022-25883 affecting package nodejs-nodemon 2.0.3-5

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...

CVE-2022-25883

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...

CVE-2022-25883

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...

CVE-2022-25883

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...

CVE-2022-25883: Inefficient Regular Expression Complexity

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...

PT-2023-16653 · Silicon · Silabs Z/Ip Gateway

Name of the Vulnerable Software and Affected Versions: SiLabs Z/IP Gateway versions 7.18.01 and earlier Description: A vulnerability allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory. Recommendations: For SiLabs Z/IP...

PT-2023-23154 · Silicon · Silabs Unify Gateway

Name of the Vulnerable Software and Affected Versions: SiLabs Unify Gateway versions 1.3.1 and earlier Description: A vulnerability in the software allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution. Recommendations: For versions...

potential arithmetic overflow in the code under review.

Lines of code Vulnerability details Summary This report highlights a high vulnerability related to potential arithmetic overflow in the code under review. Vulnerability Details The code performs arithmetic operations, such as addition, subtraction, multiplication, and division, on sdk.Int values...

OpenZeppelin security vulnerabilities

OpenZeppelin is a software application. A standard for secure blockchain applications. A security vulnerability exists in OpenZeppelin Contracts version 4.7.0 through versions prior to 4.9.2. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or vendo...

ROS-20230616-03

Vim text editor vulnerability is related to using pointer offset outside the allowed range in mbcharlen function in mbyte.c. range in the mbcharlen function in mbyte.c. Exploitation of the vulnerability could allow an attacker, remotely, trick the victim into opening a specially crafted file and...

PT-2023-15805 · Unknown · Bisheng-Wnm Fw

Name of the Vulnerable Software and Affected Versions: BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta through BiSheng-WNM FW 3.0.0.325 Description: A system command injection issue allows for remote code execution upon successful exploitation. Recommendations: For BiSheng-WNM versions...

CVE-2022-33166

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 228586...

DEBIAN-CVE-2023-30631

Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server. The configuration option proxy.config.http.pushmethodenabled didn't function. However, by default the PUSH method is blocked in the ipallow configuration file.This issue affects Apache Traffic Server:...

DEBIAN-CVE-2023-33933

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: from 8.0.0 through 9.2.0. 8.x users should upgrade to 8.1.7 or later versions 9.x users should upgrade to 9.2.1 or later versions...

cpdb-libs security vulnerabilities

cpdb-libs is an OpenPrinting open source front-end and back-end library for a generic print dialog. A security vulnerability exists in cpdb-libs versions 1.0 through 2.0b4, which stems from a buffer overflow due to improper use of scanf...

Comparing Ether values using equality operators (== or !=) can be very hard to match each other . This will always reverts

Lines of code Vulnerability details Impact Comparing Ether values using equality operators can be very hard to match each other because Ether values are stored in a 256-bit unsigned integer uint256 in Solidity. This means that there are a very large number of possible Ether values, and it is very...

PT-2023-3292 · Teamviewer · Teamviewer Remote

Name of the Vulnerable Software and Affected Versions: TeamViewer Remote versions 15.41 through 15.42.7 Description: The issue is related to an improper authorization check of local device settings in TeamViewer Remote, allowing an unprivileged user to change basic local device settings even thou...

CVE-2022-47376

The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although some site installations may choose to store personal data...