Open Source Vulnerabilities

airflow-2

airflow-2

nemo-rl-cuda-13.0-vllm

airflow-2

nemo-rl-cuda-13.0-vllm

nemo-rl-cuda-13.0-vllm

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 92

wireshark

In Wireshark 3

intel-ucode, intel-ucode, xen, xen, xen

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable i...

wireshark

In Wireshark through 3

libxslt, qt5-qtwebengine

Use after free in Blink XSLT in Google Chrome prior to 91

xen, xen, xen

Recent x86 CPUs offer functionality named Control-flow Enforcement Technology (CET)

opensearch-dashboards-3-fips

qt5-qtwebengine

Stack buffer overflow in Printing in Google Chrome prior to 92

wireshark

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3

opensearch-dashboards-3-fips

opensearch-dashboards-3-fips

opensearch-dashboards-3-fips

xen, xen, xen

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated

haserl

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0

qt5-qtwebengine

Use after free in sensor handling in Google Chrome on Windows prior to 92

wireshark

Memory leak in RTPS protocol dissector in Wireshark 3

xen, xen, xen

Arm provides multiple helpers to clean & invalidate the cache for a given region

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 92

wireshark

Memory leak in the dissection engine in Wireshark 3

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 92

xen, xen, xen

fixes for XSA-422 (Branch Type Confusion) and XSA-434 (Speculative Return Stack Overflow) are not IRQ-safe

wireshark

Memory leak in Kafka protocol dissector in Wireshark 3

qt5-qtwebengine

Use after free in WebRTC in Google Chrome prior to 92

xen, xen, xen

current setup of the quarantine page tables assumes that the quarantine domain (dom_io) has been initialized with an address width of DEFAULT_DOMAIN_ADDRESS_WIDTH (48) and hence 4 page table levels

wireshark

Buffer overflow in QUIC dissector in Wireshark 3

usbredir

use-after-free vulnerability was found in usbredir in versions prior to 0

qt5-qtwebengine

Data race in WebAudio in Google Chrome prior to 92

xen, xen, xen

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

wireshark

Crash in USB HID dissector in Wireshark 3

qt5-qtwebengine

Use after free in ANGLE in Google Chrome prior to 92

xen, xen, xen

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

wireshark

Memory leak in USB HID dissector in Wireshark 3

qt5-qtwebengine

Chromium: CVE-2021-30613 Use after free in Base internals

xen, xen, xen

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

wireshark

Improper URL handling in Wireshark 3

qt5-qtwebengine

Chromium: CVE-2021-30618 Inappropriate implementation in DevTools

xen, xen, xen

caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3

nautilus

issue was discovered in GNOME Nautilus 3

wireshark

Excessive memory consumption in MS-WSP dissector in Wireshark 3

fish

fish is a command line shell

qt5-qtwebengine

Use after free in Selection API in Google Chrome prior to 93

xen, xen, xen

When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes

wireshark

Infinite loop in DVB-S2-BB dissector in Wireshark 3

qt5-qtwebengine

Out of bounds memory access in ANGLE in Google Chrome prior to 93