🚨 EUVD-2023-55278 📊 n/a 📝 NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry(). 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-55278 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-0587 📊 7.5/10 📝 A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposur... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-0587 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-56105 📊 5.5/10 📝 In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-56105 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-56106 📊 6.5/10 📝 In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion tok... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-56106 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-56456 📊 7.0/10 📝 OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in m... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-56456 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-57052 📊 7.5/10 📝 libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple b... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57052 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-57053 📊 5.5/10 📝 libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57053 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-57083 📊 n/a 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: block: add check that partition length needs to be aligned with block size Before calling... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57083 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-57089 📊 n/a 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: EDAC/thunderx: Fix possible out-of-bounds string access Enabling -Wstringop-overflow glob... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57089 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-57236 📊 7.8/10 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req->dst buffer overflow The req->dst buffer size should be checke... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57236 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-57238 📊 7.8/10 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in trans_stat_show Fix buffer overflow in trans_stat... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57238 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-57244 📊 7.8/10 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow timeout for anonymous sets Never used from userspace, d... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57244 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-57246 📊 n/a 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg When we online resize an ex... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57246 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-57299 📊 n/a 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57299 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-57323 📊 5.3/10 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sb_bread() with pointers_lock held syzbot is reporting sleep in atomi... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-57323 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-59682 📊 7.8/10 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrac... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59682 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2023-59897 📊 5.5/10 🏢 Linux 📝 In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none After grabbing q... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59897 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-16030 📊 4.7/10 📝 A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a vict... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16030 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-16346 📊 7.5/10 🏢 Red Hat 📝 A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertext... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16346 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2024-16360 📊 7.5/10 🏢 Red Hat 📝 A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when valida... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16360 #cybersecurity #infosec #cve #euvd