CVE-2024-9427

A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code...

RLSA-2024:10379 Important: pam security update

Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: pam: libpam: Libpam vulnerable to read hashed password CVE-2024-10041 pam: Improper Hostname Interpretation in pamaccess Leads t...

CVE-2024-12686

creationtimestamp| type| source ---|---|--- 2024-12-18 20:30:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113675719318388901 2024-12-18 22:54:10+00:00| seen| https://t.me/cvedetector/13251 2024-12-19 17:22:24+00:00| seen|...

CVE-2024-56170

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI manifests are listings of relevant files that clients are supposed to verify. Assuming everything else is correct, the most recent version of a manifest should be prioritized over other versions, to prevent...

CVE-2024-49194

Databricks JDBC Driver 2.x (prior to 2.6.40) is affected by a JNDI injection vulnerability via the krbJAASFile parameter in a JDBC URL. The issue allows remote code execution in the driver context if a user connects using a crafted URL that includes the krbJAASFile property. Root cause is imprope...

ALSA-2024:11123 Important: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in...

CVE-2024-11012

creationtimestamp| type| source ---|---|--- 2024-12-13 09:30:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113644811957164473 2024-12-13 12:25:37+00:00| seen| https://t.me/cvedetector/12851...

Important: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2024-9844

Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass restrictions...

CVE-2024-12236

creationtimestamp| type| source ---|---|--- 2024-12-10 15:10:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113629164313708186 2024-12-10 17:28:33+00:00| seen| https://t.me/cvedetector/12514...

CVE-2023-50877

creationtimestamp| type| source ---|---|--- 2024-12-09 14:16:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113623288286519975...

CVE-2024-54749

creationtimestamp| type| source ---|---|--- 2024-12-06 16:51:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113606912033112800 2024-12-06 18:58:11+00:00| seen| https://t.me/cvedetector/12245...

CVE-2024-11944

creationtimestamp| type| source ---|---|--- 2024-12-06 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1643/ 2024-12-30 20:19:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113743623769169923 2024-12-30 22:39:24+00:00| seen| https://t.me/cvedetector/13964...

CVE-2024-53140

creationtimestamp| type| source ---|---|--- 2024-12-04 15:13:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113595199818411766 2024-12-04 16:45:25+00:00| seen| https://t.me/cvedetector/11992 2025-04-12 00:10:16+00:00| seen|...

CVE-2024-47094

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p22, 2.2.0p37, 2.1.0p50 EOL causes remote site secrets to be written to web log files accessible to local site users...

CVE-2024-11482

creationtimestamp| type| source ---|---|--- 2024-11-29 07:39:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113565104536407982 2024-11-29 07:42:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113565117531942043 2024-11-29 13:16:04+00:00| seen|...

CVE-2024-11622

creationtimestamp| type| source ---|---|--- 2024-11-26 21:33:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113551397782158745 2024-12-02 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1635/...

CVE-2024-8177

creationtimestamp| type| source ---|---|--- 2024-11-26 15:33:23+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113549980676758562 2024-11-26 18:37:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113550702931425732...

CVE-2024-53914

creationtimestamp| type| source ---|---|--- 2024-11-24 21:17:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113540007352776400 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1665/...