jsPDF has Shared State Race Condition in addJS Plugin

Impact The addJS method in the jspdf Node.js build utilizes a shared module-scoped variable text to store JavaScript content. When used in a concurrent environment e.g., a Node.js web server, this variable is shared across all requests. If multiple requests generate PDFs simultaneously, the...

kernel: wifi: iwlwifi: mvm: fix 6 GHz scan construction

A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability can lead to a Denial of Service DoS when constructing a 6 GHz wireless scan. Due to an 8-bit loop counter, discovering more than 255 co-located access points APs causes the driver to enter an infinite loop. An attacker with...

CVE-2018-10581: Exposure of Sensitive Information to an Unauthorized Actor

In Octopus Deploy 3.4.x before 2018.4.7, an authenticated user is able to view/update/save variable values within the Tenant Variables area for Environments that do not exist within their associated Team scoping. This occurs in situations where this authenticated user also belongs to multiple...

CVE-2018-9039

In Octopus Deploy 2.0 and later before 2018.3.7, an authenticated user, with variable edit permissions, can scope some variables to targets greater than their permissions should allow. In other words, they can see machines beyond their team's scoped environments...