3346 matches found
xfsprogs bug fix update
An update is available for xfsprogs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The xfsprogs packages contain a set of utilities to administer the XFS file...
AZL-28051 CVE-2022-48063 affecting package binutils for versions less than 2.37-10
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...
AZL-28584 CVE-2022-35205 affecting package binutils for versions less than 2.37-10
An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function displaydebugnames allows attackers to cause a denial of service...
XZ 安全漏洞
xz is a software application. It is used to support reading and writing xz compressed streams. A security vulnerability exists in XZ Utils version 5.2.5, which stems from a vulnerability that allows an attacker to cause a denial of service by unzipping specially crafted files...
[SECURITY] Fedora 38 Update: procps-ng-3.3.17-11.fc38
The procps package contains a set of system utilities that provide system information. Procps includes ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, pidof, pmap, slabtop, w, watch, pwdx and pidwait. The ps command displays a snapshot of running processes. The top command...
The vulnerability of the JT Utilities and JT Open Toolkit (JTTK) application development tools, related to the ability to read data beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the JT Utilities and JT Open Toolkit JTTK application development tools is related to the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Fedora: Security Advisory for procps-ng (FEDORA-2023-30c3ca07eb)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0 <=2.54.0), com.compuware.jenkins:compuware-scm-downloader (>=1.6 <=2.0.5) +105 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (>=4.0 <=6.815.v0dd5a_cb_40e0e)
org.jenkins-ci.plugins:cloudbees-folder MAVEN version =4.0, =2.33.0, =1.6, =1.8, =1.0.2, =1.0.0, =2.0.0, =0.4, =1.0, =7.5.7, =0.9.1, =1.0-alpha-1, =1.27.19, =1.27.25 and more Source cves: CVE-2023-40338 Source advisory: OSV:GHSA-36HQ-V2FC-RPQP...
[SECURITY] Fedora 37 Update: ghostscript-9.56.1-9.fc37
This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...
hellojs security vulnerability
hellojs is a JavaScript-written client-side software development kit for user Oauth authentication for individual developers. A security vulnerability exists in MrSwitch hello.js version 1.18.6, which stems from the presence of a prototype contamination vulnerability. An attacker can exploit the...
Siemens JT Open, JT Utilities and Parasolid Out-of-Bounds Read Vulnerabilities
JT Open Toolkit is an Application Programming Interface API for software developers who support JT, a publicly available data format developed by Siemens Digital Industry Software for a wide range of communication, visualization, numerical modeling, and a variety of other purposes.Parasolid is a ...
Siemens JT Open and JT Utilities Out-of-Bounds Read Vulnerability
The JT Open Toolkit is an application programming interface API for software developers who support JT, a publicly available data format developed by Siemens Digital Industry Software for use in a wide range of communication, visualization, numerical modeling and various other purposes. An...
sos bug fix and enhancement update
An update is available for sos. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sos package contains a set of utilities that gather information from system...
CVE-2023-30795
A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4, Parasolid V34.0 All versions V34.0.253, Parasolid V34.1 All versions V34.1.243, Parasolid V35.0 All versions V35.0.177, Parasolid V35.1 All versions V35.1.073. The affected applications contain an...
CVE-2023-30796
A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context ...
CVE-2023-30796
A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context ...
Out-of-bounds
A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context ...
CVE-2023-30796
A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context ...
CVE-2023-30796
CVE-2023-30796 concerns an out-of-bounds read while parsing specially crafted JT files in Siemens JT Open (all versions < V11.4) and JT Utilities (all versions
CVE-2023-30796
A vulnerability has been identified in JT Open All versions V11.4, JT Utilities All versions V13.4. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context ...