204 matches found
CVE-2010-0590
The CMSIPUtility component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.13asu1 and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP Register message, aka Bug ID CSCtc37188...
CVE-2021-0590
In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User...
CVE-2026-0590
creationtimestamp| type| source ---|---|--- 2026-01-05 14:00:58+00:00| seen| Telegram/OnsG3OkAw79zRAAGEwz-ObL4fanvyYerBQxPUZBTsapiCw 2026-01-05 17:08:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbowi5znvs2q...
CVE-2026-0590 code-projects Online Product Reservation System POST Parameter delete.php sql injection
A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/delete.php of the component POST Parameter Handler. This manipulation of the argument ID causes sql injection. It is possible to initiate th...
Linux Distros Unpatched Vulnerability : CVE-2017-0590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media...
CVE-2020-0590
Improper input validation in BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access...
Linux Distros Unpatched Vulnerability : CVE-2023-0590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in qdiscgraft in net/sched/schapi.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If...
CVE-2025-0590
Improper permission settings for mobile applications com.transsion.carlcare may lead to information leakage risk...
CVE-2025-0590
creationtimestamp| type| source ---|---|--- 2025-01-20 06:35:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113859293445808923 2025-01-20 07:17:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg5sauay6o2f 2025-01-20 07:39:56+00:00| seen|...
CVE-2025-0590
CVE-2025-0590 affects the TECNO/Transsion Carlcare mobile app. The root cause is improper permission settings that may cause information leakage (CVE-2025-0590; CVSS 3.1: 7.5 HIGH, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Exploitation details are not provided in the documents; remediation/fixes are ...
CVE-2025-0590
Improper permission settings for mobile applications com.transsion.carlcare may lead to information leakage risk...
OracleVM 3.4 : kernel-uek (OVMSA-2024-0006)
The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.87.2- net: sched: fix race condition in qdiscgraft Eric Dumazet Orabug: 35250827 CVE-2023-05904.1.12-124.87.1- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet Zhengchao Shao Orabug:...
CVE-2023-4780
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-0590. Reason: This candidate is a duplicate of CVE-2024-0590. Notes: All CVE users should reference CVE-2024-0590 instead of this candidate. All references and descriptions in this candidate have been removed to preven...
CVE-2024-0590
creationtimestamp| type| source ---|---|--- 2024-03-08 09:26:17+00:00| seen| https://t.me/ctinow/203165...
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:0433-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Microsoft Clarity Plugin <= 0.9.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software Microsoft Clarity Type Plugin Vulnerable versions = 0.9.3 Fixed in 0.9.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Request Forgery CSRF CVE CVE-2024-0590 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID ed349755a080 Credits kodaichodai...
[SECURITY] [DLA 3710-1] linux security update
Debian LTS Advisory DLA-3710-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings January 10, 2024 https://wiki.debian.org/LTS Package : linux Version : 4.19.304-1 CVE ID : CVE-2021-44879 CVE-2023-0590 CVE-2023-1077 CVE-2023-1206 CVE-2023-1989 CVE-2023-3212 CVE-2023-33...
Important: kernel
Issue Overview: A use-after-free flaw was found in qdiscgraft in net/sched/schapi.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. CVE-2023-0590 When a router encounters an IPv6 packet too big to transmit to the next-hop, it returns an ICMP6 "Packet Too...
Important: Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tun: avoid double free in tunfreenetdev CVE-2022-4744 kernel: net/sched: multiple vulnerabilities CVE-2023-3609, CVE-2023-3611, CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208...