24 matches found
ROOT-OS-DEBIAN-11-CVE-2024-46720 CVE-2024-46720 in rootio-linux - Patched by Root
Root has patched CVE-2024-46720 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2024-46720 CVE-2024-46720 in rootio-linux - Patched by Root
Root has patched CVE-2024-46720 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
EUVD-2026-32021
Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Version 0.06 changes the module from being a stats...
CVE-2026-46720
creationtimestamp| type| source ---|---|--- 2026-05-17 19:07:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm32ojjpes2b 2026-05-17 22:37:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm3gfpgtxa2i...
@kids-reporter/cms-core (>=1.0.17 <=1.0.32), @kids-reporter/draft-editor (>=1.0.19 <=1.0.32) potentially affected by CVE-2025-46720 +1 more via @keystone-6/core (=6.5.1)
@keystone-6/core NPM version =6.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @kids-reporter/cms-core =1.0.17, =1.0.19, =1.0.32 Source cves: CVE-2025-46720, CVE-2026-33326 Source advisory:...
GHSA-CGCG-Q9JH-5PR2 @keystone-6/core: `isFilterable` bypass via `cursor` parameter in findMany (CVE-2025-46720 incomplete fix)
Summary field.isFilterable access control can be bypassed in findMany queries by passing a cursor. This can be used to confirm the existence of records by protected field values. The fix for CVE-2025-46720 field-level isFilterable bypass for update and delete mutations added checks to the where...
Azure Linux 3.0 Security Update: kernel (CVE-2024-46720)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46720 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null...
CVE-2025-46720
Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...
CVE-2025-46720
creationtimestamp| type| source ---|---|--- 2025-05-05 21:44:13+00:00| seen| https://t.me/cvedetector/24478...
CVE-2025-46720
Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...
CVE-2025-46720 Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields
Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...
CVE-2025-46720
Keystone (Node.js CMS) prior to 6.5.0 has an Access Control Bypass in update/delete mutations: when a where clause uses multiple unique filters, the isFilterable check can be bypassed, enabling inference of hidden field values. The issue is patched in @keystone-6/core v6.5.0. Mitigations from the...
CVE-2025-46720 Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields
Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...
CVE-2023-46720
creationtimestamp| type| source ---|---|--- 2025-05-01 04:14:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14227...
Linux Distros Unpatched Vulnerability : CVE-2024-46720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix dereference after null check check the pointer hive before use. CVE-2024-46720 Note that Nessus relies on the presence of the package as reporte...
CVE-2024-46720 affecting package kernel for versions less than 6.6.51.1-5
CVE-2024-46720 affecting package kernel for versions less than 6.6.51.1-5. An upgraded version of the package is available that resolves this issue...
SUSE CVE-2024-46720
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use...
CVE-2024-46720
creationtimestamp| type| source ---|---|--- 2024-09-18 10:01:25+00:00| seen| https://t.me/cvedetector/5910 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...
CVE-2024-46720
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use...
CVE-2024-46720
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use...