133 matches found
CVE-2024-6505
creationtimestamp| type| source ---|---|--- 2024-07-05 16:40:30+00:00| seen| https://t.me/cvedetector/98...
CVE-2024-6505 Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss
A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirectionstable data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This...
CVE-2024-6505
Affects QEMU's virtio-net with RSS enabled. The indirections_table in RSS becomes controllable, and extreme values can trigger an index-out-of-bounds, leading to a heap overflow and the host QEMU process crash. Descriptions across advisories (SUSE SUSE-SU-2026:0039/0043-1, Ubuntu USN-7744-1, Tenc...
CVE-2024-6505
A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirectionstable data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This...
CVE-2024-6505
A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirectionstable data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This...
USN-6505-1: nghttp2 vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that nghttp2 incorrectly handled request cancellation. A remote attacker could possibly use this issue to cause nghttp2 to consume resources, leading to a denial of service. Update...
Malicious code in wlwz-2312-6505 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeac3483aa614c196a021210c3f415551f6cb842edd84abe9131f1c98356798e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-760 Malicious code in wlwz-2312-6505 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeac3483aa614c196a021210c3f415551f6cb842edd84abe9131f1c98356798e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-6505
creationtimestamp| type| source ---|---|--- 2024-01-08 20:27:10+00:00| seen| https://t.me/ctinow/164610 2024-01-25 16:22:17+00:00| seen| https://t.me/ctinow/173549 2025-06-18 16:43:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18789...
CVE-2023-6505 Prime Mover < 1.9.3 - Directory Listing to Sensitive Data Exposure
The Migrate WordPress Website & Backups WordPress plugin before 1.9.3 does not prevent directory listing in sensitive directories containing export files...
CVE-2023-6505 Prime Mover < 1.9.3 - Directory Listing to Sensitive Data Exposure
The Migrate WordPress Website & Backups WordPress plugin before 1.9.3 does not prevent directory listing in sensitive directories containing export files...
CVE-2023-6505
CVE-2023-6505 relates to the Prime Mover WordPress plugin vulnerability prior to version 1.9.3, where directory listing is not prevented in the sensitive folder prime-mover-export-files/1/. This unauthenticated misconfiguration allows exposure of export files containing sensitive data (site confi...
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : nghttp2 vulnerability (USN-6505-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6505-1 advisory. It was discovered that nghttp2 incorrectly handled request cancellation. A remote attacker could possibly use this issue to cause...
SUSE CVE-2016-6505
epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted packet...
br.net.woodstock.rockframework:rockframework-web (>=1.2.1 <=1.2.2), net.sf.fastupload:fastupload-core (=0.4.7) +25 more potentially affected by CVE-2008-6505 via org.apache.struts:struts2-core (=2.1.2)
org.apache.struts:struts2-core MAVEN version =2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - br.net.woodstock.rockframework:rockframework-web =1.2.1, =1.2.2 - net.sf.fastupload:fastupload-cor...
org.apache.struts:struts2-apps (>=2.0.11 <=2.0.11.2), org.apache.struts:struts2-assembly (=2.0.11) +19 more potentially affected by CVE-2008-6505 via org.apache.struts:struts2-core (>=2.0.11 <=2.0.11.2)
org.apache.struts:struts2-core MAVEN version =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11, =2.0.11.2 and more Source cves: CVE-2008-6505 Source advisory: OSV:GHSA-WV7G-XHVW-8HCP...
Apache Struts Security Update (S2-004) - Version Check
The remote host is missing a security update for Apache Struts announced via the referenced advisory. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
SUSE: Security Advisory (SUSE-SU-2016:2212-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2017:1058-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2017:1081-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...