CVE-2023-37466 vm2 Sandbox Escape vulnerability

vm2 is an advanced vm/sandbox for Node.js. The library contains critical security issues and should not be used for production. The maintenance of the project has been discontinued. In vm2 for versions up to 3.9.19, Promise handler sanitization can be bypassed with the @@species accessor property...

CVE-2023-37466 vm2 Sandbox Escape vulnerability

vm2 is an advanced vm/sandbox for Node.js. The library contains critical security issues and should not be used for production. The maintenance of the project has been discontinued. In vm2 for versions up to 3.9.19, Promise handler sanitization can be bypassed with the @@species accessor property...

CVE-2023-37466 vm2 Sandbox Escape vulnerability

vm2 is an advanced vm/sandbox for Node.js. The library contains critical security issues and should not be used for production. The maintenance of the project has been discontinued. In vm2 for versions up to 3.9.19, Promise handler sanitization can be bypassed with the @@species accessor property...

USN-6227-1: SpiderMonkey vulnerabilities

Several security issues were discovered in the SpiderMonkey JavaScript library. If a user were tricked into opening malicious JavaScript applications or processing malformed data, a remote attacker could exploit a variety of issues related to JavaScript security, including denial of service...

USN-6227-1 mozjs102 vulnerabilities

Several security issues were discovered in the SpiderMonkey JavaScript library. If a user were tricked into opening malicious JavaScript applications or processing malformed data, a remote attacker could exploit a variety of issues related to JavaScript security, including denial of service...

PT-2023-22792 · Unknown · Alaris Systems Manager

Name of the Vulnerable Software and Affected Versions: Alaris Systems Manager affected versions not specified Description: The issue is related to the lack of input validation during the Device Import Function. This could potentially lead to security issues, but specific details about exploitatio...

CISA Releases One Industrial Control Systems Advisory

CISA released one Critical Industrial Control Systems ICS advisory on July 12, 2023. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-193-01 Rockwell Automation Select Communication Modules CISA encourages users and...

July 11, 2023—KB5028185 (OS Build 22621.1992)

None None...

USN-6214-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing,...

PT-2023-36346 · Sqlite3 · Sqlite3

Name of the Vulnerable Software and Affected Versions: sqlite3 affected versions not specified Description: The issue is related to possible unfixed security issues due to bundled sqlite3. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Functions don't update after being called

Lines of code Vulnerability details Impact Without updating the reserve or vault value of tokens after calling different functions, the contract may be prone to inconsistent state, security issues, financial implications, and bad user experience. It is important to review and update the reserve...

Potential Integer Underflow/Overflow: The code uses the SafeCastLib library for type conversions, but it does not handle potential underflow or overflow situations.

Lines of code Vulnerability details Impact The potential integer underflow/overflow vulnerability in the code can lead to incorrect calculations, unexpected behavior, and potential security issues. Proof of Concept In the provided code, there are a few areas where potential integer...

SUSE-SU-2023:2773-1 Security update for kubernetes1.18

This update of kubernetes1.18 fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...

Omron SYSMAC Missing Authentication (CVE-2023-27396)

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

SUSE-SU-2023:2724-1 Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059109 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality bsc1209672. - CVE-2023-31436: Fixed an out-of-bounds write i...

SUSE-SU-2023:2721-1 Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002433 fixes several issues. The following security issues were fixed: - CVE-2023-23455: Fixed a denial of service inside atmtcenqueue in net/sched/schatm.c because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition...

SUSE-SU-2023:2719-1 Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122147 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfqchangeclass because lmax can exceed QFQMINLMAX bsc1210989. - CVE-2023-1390: Fixed remote DoS vulnerability in tipclinkxmit bsc121077...

SUSE-SU-2023:2718-1 Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122130 fixes several issues. The following security issues were fixed: - CVE-2023-23455: Fixed a denial of service inside atmtcenqueue in net/sched/schatm.c because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition rather...

OPENSUSE-SU-2023:0159-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 114.0.5735.198 boo1212755: CVE-2023-3420: Type Confusion in V8 CVE-2023-3421: Use after free in Media CVE-2023-3422: Use after free in Guest View - Install Qt5 library & prepare for Qt6 in 115...

SUSE-SU-2023:2708-1 Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP4)

This update for the Linux Kernel 4.12.14-95111 fixes several issues. The following security issues were fixed: - CVE-2023-23455: Fixed a denial of service inside atmtcenqueue in net/sched/schatm.c because of type confusion non-negative numbers can sometimes indicate a TCACTSHOT condition rather...