CVE-2023-26117

Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic...

CVE-2023-26118

Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service ReDoS via the element due to the usage of an insecure regular expression in the inputurl functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result ...

unpoly-rails Denial of Service vulnerability

There is a possible Denial of Service DoS vulnerability in the unpoly-rails gem that implements the Unpoly server protocol for Rails applications. Impact This issues affects Rails applications that operate as an upstream of a load balancer's that uses passive health checks. The unpoly-rails gem...

PT-2023-19696 · Linux Mint +2 · Linuxmint +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue was rejected by upstream. There is no additional information about the nature of the issue or its potential impact. Recommendations: At the...

PT-2023-19963 · Linux Mint +2 · Linuxmint +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue was rejected by upstream. No further details are provided about the nature of the issue or its potential impact. Recommendations: At the momen...

UBUNTU-CVE-2023-24593

Rejected reason: Rejected by upstream...

CVE-2023-24593

Rejected reason: Rejected by upstream...

CVE-2023-25180

Rejected reason: Rejected by upstream...

UBUNTU-CVE-2023-25180

Rejected reason: Rejected by upstream...

CVE-2023-0466

The function X509VERIFYPARAMadd0policy is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate...

GHSA-XXMQ-4VPH-956W Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)

Impact comrak is vulnerable to the upstream cmark issue, "Issue revealed by fuzzer". A large number of references in a markdown document can trigger an overly large response. Patches 0.17.0 contains https://github.com/kivikakk/comrak/commit/70f97f3ea4eae30ffbd1b94c764a3de2f1c41d2a, which limits...

Mageia: Security Advisory (MGASA-2023-0088)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-26924

LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language front-ends ... for which a malicious input file can cause undesirable behavior."...

SUSE CVE-2023-24593

Rejected by upstream...

SUSE CVE-2023-25180

Rejected by upstream...

CVE-2023-24593

Rejected by upstream...

CVE-2023-25180

Rejected by upstream...

Fedora 36 : firefox (2023-fd5e1c279d)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-fd5e1c279d advisory. - Updated to latest upstream 111.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : firefox (2023-24b2b22eca)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-24b2b22eca advisory. - Update to latest upstream 111.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

firefox security update

102.9.0-3.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 102.9.0-3 - Update to 102.9.0 build2 102.9.0-2 - removed disable-openh264-download 102.9.0-1 - Update...