46 matches found
CVE-2025-24294 vulnerabilities
Vulnerabilities for packages: ruby, jruby...
CVE-2025-24294 vulnerabilities
Vulnerabilities for packages: jruby, ruby, truffleruby...
CVE-2025-24294
creationtimestamp| type| source ---|---|--- 2025-07-12 13:32:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114840512588395947 2025-08-25 12:00:56+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lx7xbhndo526 2025-09-04 09:18:41+00:00| seen|...
AZL-65241 CVE-2025-24294 affecting package ruby for versions less than 3.3.5-5
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
CVE-2025-24294
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
CVE-2025-24294
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
CVE-2025-24294
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
CVE-2025-24294
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
CVE-2023-24294
Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification...
CVE-2022-24294
A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...
CVE-2021-24294
The dsgvoaiowritelog AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard wp-admin/admin.php?page=dsgvoaiofree-show-log. This could allow unauthenticate...
CVE-2024-24294
A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...
CVE-2024-24294
Summary: CVE-2024-24294 affects Blackprint @blackprint/engine, notably versions 0.8.12 through 0.9.1 (documented as v.0.9.0 in CVE records). The issue is a prototype pollution flaw in the _utils.setDeepProperty function in engine.min.js that enables an attacker to execute arbitrary code. Public r...
CVE-2024-24294
A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...
CVE-2023-24294
creationtimestamp| type| source ---|---|--- 2023-12-20 09:12:07+00:00| seen| https://t.me/ctinow/156816...
CVE-2023-24294
Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification...
CVE-2023-24294
Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification...
CVE-2020-24294
Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 r1859 allows remote attackers to cuase a denial of service via opening of crafted psd file...
CVE-2020-24294
Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 r1859 allows remote attackers to cuase a denial of service via opening of crafted psd file...
