git: malicious placement of crafted messages when git was compiled with runtime prefix

A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the...

Omron SYSMAC CS/CJ/CP Series and NJ/NX Series Improper Verification of Cryptographic Signature (CVE-2022-31206)

The Omron SYSMAC Nx product family PLCs NJ series, NY series, NX series, and PMAC series through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software which compiles IEC 61131-3 conformant POU code to native machine code for execution...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0009

Updates of 'linux-esx', 'tcpdump', 'influxdb', 'vim', 'haproxy', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

Oracle Linux 7 : apr-util (ELSA-2023-3145)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3145 advisory. 1.5.2-6.0.1.1 - Rebuild bumping release 1.5.2-6.1 - Resolves: 2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the aprbase64 Tenable has extracted the...

AlmaLinux 8 : apr-util (ALSA-2023:3109)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:3109 advisory. - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a...

CVE-2023-24832

A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to crash an Hermes runtime where the EnableHermesInternal config option was set to true. Note that this is only exploitable in cases where Hermes is used to execut...

CVE-2023-25933

A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker to execute arbitrary code via untrusted JavaScript. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, mos...

Null pointer dereference

A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to crash an Hermes runtime where the EnableHermesInternal config option was set to true. Note that this is only exploitable in cases where Hermes is used to execut...

CVE-2023-24832

The CVE-2023-24832 issue is a null pointer dereference in the Hermes JavaScript engine prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708. The vulnerability could crash a Hermes runtime when EnableHermesInternal is set to true and untrusted JavaScript is executed; most React Native apps are...

CVE-2023-24832

A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to crash an Hermes runtime where the EnableHermesInternal config option was set to true. Note that this is only exploitable in cases where Hermes is used to execut...

CVE-2023-24832

A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to crash an Hermes runtime where the EnableHermesInternal config option was set to true. Note that this is only exploitable in cases where Hermes is used to execut...

CVE-2023-24832

A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to crash an Hermes runtime where the EnableHermesInternal config option was set to true. Note that this is only exploitable in cases where Hermes is used to execut...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

Security Bulletin: A vulnerability in IBM Java Runtime affects Tivoli Netcool/OMNIbus (CVE-2023-30441)

Summary IBM® Runtime Environment Java™ Technology Edition, Version 8 is shipped as a component of Tivoli Netcool/OMNIbus. Information about a security vulnerability affecting the IBM Java Runtime has been published in a security bulletin. Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IB...

EulerOS 2.0 SP10 : apr-util (EulerOS-SA-2023-1969)

According to the versions of the apr-util package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write...

AlmaLinux 9 : apr-util (ALSA-2023:3147)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:3147 advisory. - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a...

PT-2023-19812 · Hermes · Hermes

Name of the Vulnerable Software and Affected Versions: Hermes versions prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 Description: A null pointer dereference bug could have been used by an attacker to crash an Hermes runtime where the EnableHermesInternal config option was set to true...

PT-2023-8344 · Apple · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6.6 macOS versions prior to 11.7.7 macOS versions prior to 13.4 Description: The issue is related to incorrect code generation management in the AppleMobileFileIntegrity component of the macOS operating system...

EulerOS 2.0 SP10 : apr-util (EulerOS-SA-2023-1947)

According to the versions of the apr-util package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write...

EulerOS 2.0 SP10 : apr (EulerOS-SA-2023-1946)

According to the versions of the apr package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond bounds of a...