6285 matches found
Security update for postgresql, postgresql16, postgresql17
This update for postgresql, postgresql16, postgresql17 fixes the following issues: This update ships postgresql17 , and fixes security issues with postgresql16: bsc1230423: Relax the dependency of extensions on the server version from exact major.minor to greater or equal, after Tom Lane confirme...
CVE-2024-52411
creationtimestamp| type| source ---|---|--- 2024-11-16 21:44:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113494817414913797 2024-11-16 21:48:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113494830821267563 2024-11-17 00:25:10+00:00| seen| https://t.me/cvedetector/112...
CVE-2024-52410
creationtimestamp| type| source ---|---|--- 2024-11-16 21:44:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113494817371217576 2024-11-16 21:48:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113494830807300654 2024-11-17 00:25:22+00:00| seen| https://t.me/cvedetector/112...
CVE-2024-10645
creationtimestamp| type| source ---|---|--- 2024-11-16 08:37:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113491723471559655 2024-11-16 11:03:17+00:00| seen| https://t.me/cvedetector/11228...
CVE-2024-10795
creationtimestamp| type| source ---|---|--- 2024-11-16 02:30:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113490280871334702 2024-11-16 05:12:11+00:00| seen| https://t.me/cvedetector/11203...
MAL-2024-10775 Malicious code in react-is-16 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66059d9e879f615ec449be8496988b1e02f5bfdcf0ba355c2fba23a87777b494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables e.g. PATH. That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions...
CVE-2024-10978
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. The problem arises when an application query uses...
CVE-2024-8648 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 16 before 17.3.7, 17.4 before 17.4.4, and 17.5 before 17.5.2. The vulnerability could allow an attacker to inject malicious JavaScript code in Analytics Dashboards through a specially crafted URL...
CVE-2024-51705
creationtimestamp| type| source ---|---|--- 2024-11-09 15:01:16+00:00| seen| https://t.me/cvedetector/10354...
CVE-2024-34891
creationtimestamp| type| source ---|---|--- 2024-11-04 21:08:16+00:00| seen| https://t.me/cvedetector/9785 2026-04-27 20:30:12+00:00| seen| https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9...
The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its ability to bypass authentication by using a user-controlled key. This allows attackers to increase their privileges.
The vulnerability of Acronis Cyber Protect 16 data protection software lies in the ability to bypass authentication by using a user-controlled key. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...
The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its use of an unprotected communication channel for data transmission, allowing attackers to gain unauthorized access to confidential information.
The vulnerability of Acronis Cyber Protect 16 data protection software lies in the use of an unprotected communication channel for data transmission. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to confidential information...
CVE-2024-44228
This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data...
CVE-2024-44228
This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data...
CVE-2024-44228
This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data...
CVE-2024-44228
This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inherit Xcode permissions and access user data...
TeamTNT Exploits 16 Million IPs in Malware Attack on Docker Clusters
This article details a new campaign by TeamTNT, a notorious hacking group, leveraging exposed Docker daemons to deploy…...
CVE-2024-50614
CVE-2024-50614 affects TinyXML-2 (up to 10.0.0). The issue is a reachable assertion in tinyxml2.cpp XMLUtil::GetCharacterRef for UINT_MAX/16 that may cause the application to exit. The OSV entries and Fedora advisories indicate a security update extending TinyXML-2 to 11.0.0 to fix this and relat...