14516 matches found
biome-text (>=3.0.0, <=3.2.1), farm (>=0.6.2, <=0.8.0) +5 more potentially affected by CVE-2023-6977 via mlflow (1.13.1)
mlflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text =3.0.0, =0.6.2, =0.7.0, =0.0.1, =1.1.0, =1.0.0, =0.4.5.dev2, =0.6.5 Source cves: CVE-2023-6977 Source advisory: OSV:GHSA-QG8P-32GR-GH6X...
biome-text (>=3.0.0, <=3.2.1), farm (>=0.6.2, <=0.8.0) +5 more potentially affected by CVE-2023-6974 via mlflow (1.13.1)
mlflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text =3.0.0, =0.6.2, =0.7.0, =0.0.1, =1.1.0, =1.0.0, =0.4.5.dev2, =0.6.5 Source cves: CVE-2023-6974 Source advisory: OSV:GHSA-59V3-898R-QWHJ...
biome-text (>=3.0.0, <=3.2.1), farm (>=0.6.2, <=0.8.0) +5 more potentially affected by CVE-2023-6975 via mlflow (1.13.1)
mlflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text =3.0.0, =0.6.2, =0.7.0, =0.0.1, =1.1.0, =1.0.0, =0.4.5.dev2, =0.6.5 Source cves: CVE-2023-6975 Source advisory: OSV:GHSA-HH8P-P8MP-GQHM...
Denial Of Service (DoS)
libcjson.so is vulnerable to Denial of Service DoS. The vulnerability is due to a missing null value check, allowing a malicious to cause a segmentation fault via the cJSONSetValuestring function within cJSON.c, resulting in DoS...
Denial Of Service (DoS)
libcjson.so is vulnerable to Denial of Service DoS. The vulnerability is due to lack of a null value check in the JSONInsertItemInArray function within cJSON.c, which allows a malicious user to trigger a segmentation fault resulting in DoS...
casync:fuzz-compress: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6331205183995904 Project: casync Fuzzing Engine: libFuzzer Fuzz Target: fuzz-compress Job Type: libfuzzerasancasync Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...
SUSE: Security Advisory (SUSE-SU-2023:4892-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15: libncurses5 / libncurses5-32bit / libncurses6 / libncurses6-32bit / etc (SUSE-SU-2023:4891-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4891-1 advisory. - CVE-2023-50495: Fixed a segmentation fault via ncwrapentry bsc1218014 - Modify reset command to avoid...
SUSE SLES12: libncurses5 / libncurses5-32bit / libncurses6 / libncurses6-32bit / etc (SUSE-SU-2023:4892-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4892-1 advisory. - CVE-2023-50495: Fixed a segmentation fault via ncwrapentry bsc1218014 Tenable has extracted the preceding description block directly from...
SUSE-SU-2023:4891-1 Security update for ncurses
This update for ncurses fixes the following issues: - CVE-2023-50495: Fixed a segmentation fault via ncwrapentry bsc1218014 - Modify reset command to avoid altering clocal if the terminal uses a modem bsc1201384...
Crypto++ Security Vulnerability
Crypto++ is a C++ cryptographic method library. A security vulnerability exists in Crypto++ version 8.9.0 that originates from a segmentation error when parsing a DER public key file. An attacker exploiting this vulnerability could create an incorrectly formatted DER public key file, and any user...
SUSE CVE-2023-50472
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c...
biome-text (>=3.0.0, <=3.2.1), farm (>=0.6.2, <=0.8.0) +5 more potentially affected by CVE-2023-6831 via mlflow (1.13.1)
mlflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text =3.0.0, =0.6.2, =0.7.0, =0.0.1, =1.1.0, =1.0.0, =0.4.5.dev2, =0.6.5 Source cves: CVE-2023-6831 Source advisory: OSV:GHSA-554W-XH4J-8W64...
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-3435)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AZL-32207 CVE-2023-50472 affecting package apparmor for versions less than 3.0.4-3
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c...
CVE-2023-50472
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c...
AZL-67467 CVE-2023-50472 affecting package apparmor for versions less than 3.1.7-1
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONSetValuestring at cJSON.c...
CVE-2023-50471
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSONInsertItemInArray at cJSON.c...