Open Source Vulnerabilities

xen, xen, xen

x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability

qt5-qtwebengine

Use after free in storage in Google Chrome prior to 100

xen, xen, xen

Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access

wazuh-dashboard-plugins

wazuh-dashboard-plugins

nodejs-current

Node

wazuh-dashboard-plugins

wazuh-dashboard-plugins

wazuh-dashboard-plugins

qt5-qtwebengine

Use after free in regular expressions in Google Chrome prior to 100

cryptsetup

vulnerability was found in upstream release cryptsetup-2

xen, xen, xen

inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s) issuing such commands

snort

Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause a denial of servic...

wazuh-dashboard-plugins

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 100

xen, xen, xen

xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e

cryptsetup

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device

qt5-qtwebengine

Use after free in Dev Tools in Google Chrome prior to 101

xen, xen, xen

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions

qt5-qtwebengine

Use after free in Media in Google Chrome prior to 99

xen, xen, xen

issue was discovered in Xen 4

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 103

vips

vips_foreign_load_gif_scan_image in foreign/gifload

actions-runner

actions-runner

xen, xen, xen

issue was discovered in Xen 4

qt5-qtwebengine, webkit2gtk-6.0, webkit2gtk

Heap buffer overflow in WebRTC in Google Chrome prior to 103

vips

im_vips2dz in /libvips/libvips/deprecated/im_vips2dz

xen, xen, xen

issue was discovered in Xen through 4

qt5-qtwebengine

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103

xen, xen, xen

issue was discovered in Xen through 4

libxfont2

In libXfont before 1

qt5-qtwebengine

Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103

xen, xen, xen

issue was discovered in Xen 4

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 103

libheif

libheif 1

xen, xen, xen

issue was discovered in Xen through 4

qt5-qtwebengine

Out of bounds read in compositing in Google Chrome prior to 102

libxcursor

libXcursor before 1

libheif

libheif v1

xen, xen, xen

issue was discovered in Xen through 4

qt5-qtwebengine

Double free in WebGL in Google Chrome prior to 102

libheif

libheif v1

xen, xen, xen

issue was discovered in Xen through 4

libxdmcp

It was discovered that libXdmcp before 1

shadowsocks-libev

exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3

qt5-qtwebengine

Insufficient policy enforcement in File System API in Google Chrome prior to 102

xen, xen, xen

issue was discovered in Xen 4

shadowsocks-libev

exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3

qt5-qtwebengine

Use after free in Messaging in Google Chrome prior to 102