input-filter-async (0.0.0), talkbox (>=0.1.5-alpha, <=0.2.1-alpha) potentially affected by CVE-2013-7453 via validator (1.0.0)

validator NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on validator and may be impacted: - input-filter-async 0.0.0 - talkbox =0.1.5-alpha, =0.2.1-alpha Source cves: CVE-2013-7453 Source advisory: OSV:GHSA-552W-RQG8-GXXM...

1405_logging (1.0.0), 1jinke.10 (1.0.0) +2692 more potentially affected by CVE-2016-4055 via moment (>=2.0.0, <=2.11.1)

moment NPM version =2.0.0, =0.1.0, =0.2.4, =0.2.0, =0.0.1, =0.0.13, =1.0.0, =4.0.0, =0.2.11, =1.0.1, =1.0.33, =0.1.0, =1.0.0-alpha.3 and more Source cves: CVE-2016-4055 Source advisory: OSV:GHSA-87VV-R9J6-G5QV...

@fibjs/matcha (0.7.1), @kraken97/restate (>=1.1.1, <=3.0.9) +37 more potentially affected by CVE-2016-1202 via electron (>=0.1.2, <=0.4.1)

electron NPM version =0.1.2, =1.1.1, =1.0.0, =1.0.0, =1.0.1, =0.3.0, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.2 - deepin 1.0.6 and more Source cves: CVE-2016-1202 Source advisory: OSV:GHSA-GVCJ-PFQ2-WXJ7...

@mlnmln/test-component (>=0.0.0, <=0.0.1), algoliasearch-extensions-bundle (>=1.2.1, <=4.3.9) +56 more potentially affected by CVE-2016-7103 via jquery-ui (>=1.10.4, <=1.10.5)

jquery-ui NPM version =1.10.4, =0.0.0, =1.2.1, =0.0.7-g, =0.0.1-a, =1.0.2, =0.10.1, =0.12.1, =0.1.1, =0.3.0, =0.0.1, =0.0.5, =0.0.3, =0.0.4 and more Source cves: CVE-2016-7103 Source advisory: OSV:GHSA-HPCF-8VF9-Q4GJ...

Juniper Junos BGP Update Vulnerability (JSA10820)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the 'bgp-error-tolerance' feature that when enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. TRUSTED...

10chars-test (>=1.0.0, <=1.0.34), 12366.ui-comp (0.0.1) +9595 more potentially affected by CVE-2019-10742 via axios (>=0.1.0, <=0.18.0)

axios NPM version =0.1.0, =1.0.0, =1.0.0, =1.2.0, =1.0.0, =0.3.11, =0.3.3, =0.3.0, =1.0.0-beta.7, =0.1.0, =0.2.1 and more Source cves: CVE-2019-10742 Source advisory: SNYK:JS-AXIOS-174505...

OracleVM 3.2 : xen (OVMSA-2017-0149)

The remote OracleVM system is missing necessary patches to address critical security updates : - From e26560a4b056dad6d85ffd9ebfad9565f210a9cc Mon Sep 17 00:00:00 2001 From: Jan Beulich Date: Wed, 30 May 2012 09:22:17 +0100 Subject: PATCH gnttab: don't use domain lock for serialization Instead us...

CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

ALPINE-CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

UBUNTU-CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

Information disclosure

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

DEBIAN-CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

CVE-2017-12135

CVE-2017-12135 concerns the Xen hypervisor grant-table handling. The connected materials show that the vulnerability involves transitive grants and a path through grant-copy handling. The core issue is in the GNTTABOP_copy path, where the fix for CVE-2017-12135 could cause the caller to receive a...

CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

multiple problems with transitive grants

ISSUE DESCRIPTION 1 Code to handle copy operations on transitive grants has built in retry logic, involving a function reinvoking itself with unchanged parameters. Such use assumes that the compiler would also translate this to a so called "tail call" when generating machine code. Empirically, th...

aorura (0.1.0), arduinors (>=0.1.0, <=0.1.1) +103 more potentially affected by unknown CVE via serial (>=0.2.1, <=0.4.0)

serial CARGO version =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.15.0, =0.16.0, =0.20.0-alpha.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2017-0008...

blob (>=0.1.0, <=0.1.1), buzz (>=0.2.0, <=1.0.4) +51 more potentially affected by CVE-2017-1000430 via base64 (>=0.1.1, <=0.4.2)

base64 CARGO version =0.1.1, =0.1.0, =0.2.0, =0.1.4, =0.1.0, =0.5.1, =0.1.0, =0.1.9, =0.3.0, =0.2.0, =0.3.2, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.4.0 and more Source cves: CVE-2017-1000430 Source advisory: OSV:RUSTSEC-2017-0004...

cassandra_macro (>=0.1.1, <=0.1.3), cdrs (>=0.1.0, <=4.0.0-beta.1) +19 more potentially affected by unknown CVE via lz4-compress (>=0.1.0, <=0.1.1)

lz4-compress CARGO version =0.1.0, =0.1.1, =0.1.0, =1.0.0, =0.3.3, =0.3.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2017-0007...