Security Vulnerabilities - CVEs Published In January 2024
HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed file information.
CVSS Score
3.1
EPSS Score
0.002
Published
2024-01-03
There is a local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI.Attackers with regular user privileges can create a fake process, and to escalate local privileges.
CVSS Score
6.7
EPSS Score
0.0
Published
2024-01-03
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in the modules/preprocs/nasm/nasm-pp.c component.
CVSS Score
5.5
EPSS Score
0.003
Published
2024-01-03
Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr_delete_term function in the libyasm/expr.c component.
CVSS Score
5.5
EPSS Score
0.007
Published
2024-01-03
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm_section_bcs_first function in the libyasm/section.c component.
CVSS Score
5.5
EPSS Score
0.003
Published
2024-01-03
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params function in the modules/preprocs/nasm/nasm-pp.c component.
CVSS Score
5.5
EPSS Score
0.002
Published
2024-01-03
Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_directive function in the modules/preprocs/nasm/nasm-pp.c component.
CVSS Score
5.5
EPSS Score
0.003
Published
2024-01-03
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function in the msj.c file.
CVSS Score
7.5
EPSS Score
0.009
Published
2024-01-02
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component.
CVSS Score
7.5
EPSS Score
0.01
Published
2024-01-02
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_parse function in the msj.c file.
CVSS Score
7.5
EPSS Score
0.004
Published
2024-01-02