13092 matches found
PT-2023-26429 · Unknown · Vowifiservice
Name of the Vulnerable Software and Affected Versions: vowifiservice affected versions not specified Description: The issue is related to a possible missing permission check in vowifiservice. This could lead to local escalation of privilege with no additional execution privileges. Recommendations...
PT-2023-24036 · Power · Power
Name of the Vulnerable Software and Affected Versions: In power affected versions not specified Description: The issue is related to a possible out of bounds write due to an insecure default value, which could lead to local escalation of privilege. System execution privileges are needed for...
Path Traversal
gitpython is vulnerable to Path Traversal. The vulnerability exists in getrefinfohelper function of symbolic.py because it does not properly validate the local file path, which allows an attacker to access files outside the expected directory...
MAL-2023-7981 Malicious code in emon-test-emon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 070f47b075b6837108f6bf3ee63c44f7a41728c57a578783719968e8f4887ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ASB-A-273966636
In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-285903027
Bulletin has no description...
BELL-CVE-2022-4883 CVE-2022-4883 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2023-1579
Bulletin has no description...
BELL-CVE-2023-29383
Bulletin has no description...
Path traversal in Zip Swift
An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...
OSV-2023-761 Heap-buffer-overflow in ICMPinfo::dissectICMP
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61836 Crash type: Heap-buffer-overflow READ 4 Crash state: ICMPinfo::dissectICMP NetworkInterface::processPacket NetworkInterface::dissectPacket...
MAL-2023-7953 Malicious code in eslint-config-lotus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ba1072b1cafbf26acefbf4bcb39b7c50dde7784a213dd5895444e43a0947326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-39663
Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service ReDoS vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk...
CVE-2023-39968 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2023-40170 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2023-39562
GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gfbsalign function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted file...
CVE-2023-34758
Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses...
DLA-3546-1 opendmarc - security update
Bulletin has no description...