Lucene search
+L

91 matches found

OSV
OSV
added 2025/03/20 10:44 a.m.4 views

SUSE-SU-2025:20155-1 Security update for protobuf

This update for protobuf fixes the following issues: - CVE-2024-2410: Fixed use after free when parsing JSON from a stream bsc1223947...

9.8CVSS5.8AI score0.00332EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2025/03/20 10:44 a.m.5 views

Security update for protobuf

This update for protobuf fixes the following issues: CVE-2024-2410: Fixed use after free when parsing JSON from a stream bsc1223947. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run th...

7.6CVSS7.4AI score0.00332EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/11/09 12:00 a.m.16 views

CBL Mariner 2.0 Security Update: mysql (CVE-2024-2410)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2410 advisory. - The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON...

9.8CVSS7.3AI score0.00332EPSS
SaveExploits0References2
CBLMariner
CBLMariner
added 2024/11/08 11:03 p.m.17 views

CVE-2024-2410 affecting package mysql for versions less than 8.0.40-2

CVE-2024-2410 affecting package mysql for versions less than 8.0.40-2. A patched version of the package is available...

9.8CVSS7AI score0.00332EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2024/11/08 9:38 p.m.18 views

CVE-2024-2410 affecting package mysql for versions less than 8.0.40-2

CVE-2024-2410 affecting package mysql for versions less than 8.0.40-2. A patched version of the package is available...

9.8CVSS7.3AI score0.00332EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/05/06 12:00 a.m.26 views

Oracle Linux 9 : harfbuzz (ELSA-2024-2410)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2410 advisory. 2.7.4-10 - Resolves:RHEL-2268 Fix CI tests results 2.7.4-9 - Resolves:RHEL-2268 CVE-2023-25193 Tenable has extracted the preceding description block directly fr...

7.5CVSS6.4AI score0.01812EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2024/05/03 6:54 p.m.22 views

CVE-2024-2410

A flaw was found in protobuf, the protocol buffer C++ implementation. A use-after-free can be triggered when reading a crafted JSON input split into separate chunks with the JsonToBinaryStream function. A successful attack may result in data leak or corruption or cause the application to crash...

7.3CVSS7.6AI score0.00332EPSS
SaveExploits0References4
NVD
NVD
added 2024/05/03 1:15 p.m.13 views

CVE-2024-2410

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

9.8CVSS7.4AI score0.00332EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/03 1:15 p.m.15 views

AZL-51319 CVE-2024-2410 affecting package mysql for versions less than 8.0.40-2

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

9.8CVSS5.7AI score0.00332EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2024/05/03 1:15 p.m.22 views

CVE-2024-2410

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

9.8CVSS7AI score0.00332EPSS
SaveExploits0References3
CVE
CVE
added 2024/05/03 12:58 p.m.116 views

CVE-2024-2410

CVE-2024-2410 concerns a use-after-free in the JsonToBinaryStream() function of the protocol buffers C++ implementation when parsing JSON from a stream with certain chunking. The issue is triggered by reading from a freed chunk, as described in multiple connected documents. Concrete details acros...

9.8CVSS7.3AI score0.00332EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2024/05/03 12:58 p.m.65 views

CVE-2024-2410

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

9.8CVSS7.1AI score0.00332EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/05/03 12:58 p.m.40 views

CVE-2024-2410 Use after free in C++ protobuf

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

7.6CVSS7.5AI score0.00332EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/03 12:58 p.m.8 views

CVE-2024-2410 Use after free in C++ protobuf

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

7.6CVSS7AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/05/03 12:58 p.m.25 views

CVE-2024-2410 Use after free in C++ protobuf

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

7.6CVSS6.6AI score0.00332EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/04/30 12:00 a.m.33 views

RHEL 9 : harfbuzz (RHSA-2024:2410)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2410 advisory. HarfBuzz is an implementation of the OpenType Layout engine. Security Fixes: harfbuzz: allows attackers to trigger On^2 growth via consecutive marks...

7.5CVSS6.5AI score0.01812EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2023/04/28 11:00 p.m.43 views

CVE-2023-2410 SourceCodester AC Repair and Services System view_booking.php sql injection

A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/bookings/viewbooking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS7.2AI score0.0063EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/04/28 11:00 p.m.13 views

CVE-2023-2410 SourceCodester AC Repair and Services System view_booking.php sql injection

A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/bookings/viewbooking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS7AI score0.0063EPSS
SaveExploits1References3
CVE
CVE
added 2023/04/28 11:00 p.m.57 views

CVE-2023-2410

CVE-2023-2410 affects SourceCodester AC Repair and Services System 1.0. The vulnerability is an SQL injection in the /admin/bookings/view_booking.php script triggered by manipulating the id parameter, allowing remote exploitation. Evidence across multiple sources confirms the issue, with mentions...

6.5CVSS6.8AI score0.0063EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/11 12:00 a.m.9 views

PT-2023-2410 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PostScript Printer Driver Pscript and PCL6 Class Printer drivers for Windows operatin...

9CVSS9.5AI score0.0164EPSS
SaveExploits0References8
Rows per page
Query Builder