Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-43783: Invalid Bug ID

Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The filename is used even if it has been created by a local adversary before Cadence started. The adversary can leverage this to create or overwrite files via a symlink attack. In some kernel configurations, code injection into the Wine registry is possible.

CVE

‘1213985?cve=title’ is not a valid bug number nor an alias to a bug.

Please press Back and try again.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda