CVE-2024-20424

creationtimestamp| type| source ---|---|--- 2024-10-23 20:45:19+00:00| seen| https://t.me/cvedetector/8760 2024-10-24 07:49:33+00:00| seen| https://t.me/CyberBulletin/26181 2024-10-24 07:49:34+00:00| seen| https://t.me/CyberBulletin/1246 2024-10-24 18:00:07+00:00| exploited|...

CVE-2022-20424

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-20424

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-20424

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-20424

IBM Cloud Pak for Applications v4.3 is affected by CVE-2021-20424, where a remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser. The issue stems from error messages that disclose implementation details. IBM notes remediation by upda...

CVE-2019-20424

creationtimestamp| type| source ---|---|--- 2020-01-27 08:37:43+00:00| seen| https://t.me/cveNotify/430...

CVE-2019-20424

In Lustre file system prior to 2.12.3, the mdt_object_remote function in the mdt module can trigger a NULL pointer dereference and panic due to insufficient validation of client packet fields. This is documented across multiple sources (e.g., NVD/Red Hat Ubuntu CNVD/CVE records). A fix/reset is i...

CVE-2019-20424

In the Lustre file system before 2.12.3, mdtobjectremote in the mdt module has a NULL pointer dereference and panic due to the lack of validation for specific fields of packets sent by a client...

CVE-2018-20424

Discuz! DiscuzX 3.4 is vulnerable when WeChat login is enabled: a remote attacker can delete the common_member_wechatmp data structure by sending ac=unbindmp to plugin.php. This is documented in CVE-2018-20424 and CNVD-2018-26767, noting a remote deletion Impact. The provided sources do not inclu...

CVE-2022-20424

The connected PT entry describes a kernel‑space use‑after‑free leak in the io_uring subsystem affecting Linux kernels prior to 5.10.161. The root cause is timens_install calling current_is_single_threaded without accounting for io_uring io_worker threads, enabling a time namespace vvar page to be...