GHSA-7HPF-G48V-HW3J

creationtimestamp| type| source ---|---|--- 2024-11-12 16:34:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113470946887369739...

GHSA-46M4-5PXJ-66F2

creationtimestamp| type| source ---|---|--- 2024-11-11 19:43:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113466030368936843...

GHSA-CM46-GQF4-MV4F

creationtimestamp| type| source ---|---|--- 2024-11-11 19:20:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113465940862819309...

GHSA-7MR7-4F54-VCX5

creationtimestamp| type| source ---|---|--- 2024-11-07 23:38:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113444304438437350...

GHSA-9C3X-R3WP-MGXM

creationtimestamp| type| source ---|---|--- 2024-11-06 21:10:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113438061821670222...

GHSA-V2QH-F584-6HJ8

creationtimestamp| type| source ---|---|--- 2024-11-05 19:22:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113431972351708222...

GHSA-53XH-MJMQ-J35P

creationtimestamp| type| source ---|---|--- 2024-11-05 18:47:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113431835985090910...

UBUNTU-CVE-2024-6531

Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded...

Mastadon's Misconfigured Rack_Attack.rb Does Not Appropriately Protect Against Brute Force Attacks

Description Mastadon relies on the RackAttack.rb file to manage API throttling in the application through the declaration of absolute paths i.e., /auth/signin. By appending random strings of characters to the end of the directory in a POST request it is possible to bypass brute force protections...

CVE-2022-20685

creationtimestamp| type| source ---|---|--- 2022-01-21 14:22:39+00:00| seen| https://t.me/truesecator/2544 2022-04-21 10:06:40+00:00| seen| https://t.me/ctinow/50589 2024-11-15 15:38:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113487715368664115...

Advisory ROSA-SA-2021-1948

Software: pcsc-lite 1.8.8 OS: Cobalt 7.9 CVE-ID: CVE-2016-10109 CVE-Crit: HIGH CVE-DESC: Post-release exploitation vulnerability in pcsc-lite before 1.8.20 allows remote attackers to cause a denial of service failure with a command that uses "cardList" after the descriptor has been released using...

Advisory ROSA-SA-2021-1867

Software: libebml 1.3.9 OS: Cobalt 7.9 CVE-ID: CVE-2021-3405 CVE-Crit: MEDIUM CVE-DESC: A bug was found in libebml before version 1.4.2. A heap overflow bug exists in the EbmlString :: ReadData and EbmlUnicodeString :: ReadData implementations of libebml. CVE-STATUS: default CVE-REV: default...

Advisory ROSA-SA-2021-1863

Software: libass 0.13.4 OS: Cobalt 7.9 CVE-ID: CVE-2020-24994 CVE-Crit: HIGH CVE-DESC: Stack overflow in the parsetag function in libass / assparse.c in libass before version 0.15.0 allows remote attackers to cause a denial of service or remote code execution via a crafted file. CVE-STATUS: defau...

UBUNTU-CVE-2019-16229

drivers/gpu/drm/amd/amdkfd/kfdinterrupt.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being serious enough to be deserving a CVE id...