6455 matches found
PT-2024-20923
Name of the Vulnerable Software and Affected Versions SteVe version 3.6.0 Description The issue is related to SteVe using predictable transaction ID's when receiving a StartTransaction request. This can allow attackers to cause a Denial of Service DoS by using the predicted transaction ID's to...
CVE-2024-25003
creationtimestamp| type| source ---|---|--- 2024-02-09 08:21:53+00:00| seen| https://t.me/ctinow/181862 2024-02-11 15:49:09+00:00| seen| https://t.me/arpsyndicate/3429 2024-02-14 08:57:00+00:00| seen| https://t.me/ctinow/184479 2024-02-14 17:16:44+00:00| seen| https://t.me/ctinow/184829 2024-03-0...
CVE-2023-27001
creationtimestamp| type| source ---|---|--- 2024-02-08 23:32:06+00:00| seen| https://t.me/ctinow/181699 2024-02-15 19:17:09+00:00| seen| https://t.me/ctinow/185798 2024-03-02 15:46:14+00:00| seen| https://t.me/ctinow/198395...
CVE-2024-24014
creationtimestamp| type| source ---|---|--- 2024-02-08 03:31:44+00:00| seen| https://t.me/ctinow/181135 2024-03-02 08:07:10+00:00| seen| https://t.me/ctinow/198260...
KLA63866 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service. 2...
CVE-2023-43535
Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger...
Memory corruption
Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger...
CVE-2023-43535
CVE-2023-43535 describes memory corruption when negative display IDs are input while processing the DISPLAYESCAPE event trigger. The NVD entry indicates high impact (confidentiality, integrity, availability) with local attack vector and low attack complexity; privileges required: low; user intera...
CVE-2023-43535: Improper Validation of Array Index
Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger...
CVE-2024-22523
creationtimestamp| type| source ---|---|--- 2024-01-30 10:31:50+00:00| seen| https://t.me/ctinow/175821 2024-02-05 21:16:45+00:00| seen| https://t.me/ctinow/179502 2024-02-22 06:37:06+00:00| seen| https://t.me/ctinow/190462...
Privacy predictions for 2024
In our previous privacy predictions piece, we outlined trends for 2023. As expected, there was a notable increase in the adoption of digital IDs to replace paper documents. For example, California expanded a pilot program for digital drivers licenses, and Russia introduced laws enabling...
Low: containerd
Issue Overview: No CVE associated with this advisory Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories...
About the security content of macOS Ventura 13.6.4
About the security content of macOS Ventura 13.6.4 This document describes the security content of macOS Ventura 13.6.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of watchOS 10.3
About the security content of watchOS 10.3 This document describes the security content of watchOS 10.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...
About the security content of tvOS 17.3
About the security content of tvOS 17.3 This document describes the security content of tvOS 17.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of iOS 16.7.5 and iPadOS 16.7.5
About the security content of iOS 16.7.5 and iPadOS 16.7.5 This document describes the security content of iOS 16.7.5 and iPadOS 16.7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
EulerOS 2.0 SP10 : c-ares (EulerOS-SA-2023-2804)
According to the versions of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will not be set, as...
EulerOS Virtualization 2.10.1 : c-ares (EulerOS-SA-2023-2913)
According to the versions of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will...
EulerOS Virtualization 2.11.1 : c-ares (EulerOS-SA-2023-3049)
According to the versions of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will...
EulerOS Virtualization 2.11.0 : c-ares (EulerOS-SA-2023-3066)
According to the versions of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will...