Security Vulnerabilities - CVEs Published In May 2023
A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-05-05
TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.
CVSS Score
9.8
EPSS Score
0.04
Published
2023-05-05
TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially constructed payload.
CVSS Score
9.8
EPSS Score
0.041
Published
2023-05-05
IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0 through 6.1.6.0) could allow a local user to cause a kernel panic. IBM X-Force ID: 252187.
CVSS Score
6.2
EPSS Score
0.0
Published
2023-05-05
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354.
CVSS Score
5.3
EPSS Score
0.001
Published
2023-05-05
IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-05-05
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-05-05
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-05-05
llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().
CVSS Score
5.5
EPSS Score
0.0
Published
2023-05-05
llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-05-05