34 matches found
CVE-2024-12692
creationtimestamp| type| source ---|---|--- 2024-12-18 21:49:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113676028499435854 2024-12-18 22:16:24+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113676136226017385 2024-12-18 23:44:26+00:00| seen|...
CVE-2024-49063
creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 18:07:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113629858660025338 2025-01-15 01:10:23+00:00| seen|...
CVE-2024-54214
creationtimestamp| type| source ---|---|--- 2024-12-06 15:35:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113606612446490248 2024-12-06 16:27:18+00:00| seen| https://t.me/cvedetector/12212...
GHSA-HWGG-QVJX-572X
creationtimestamp| type| source ---|---|--- 2024-11-18 20:10:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113505769920267707...
CVE-2024-49933
In the Linux kernel, the following vulnerability has been resolved: blkiocost: fix more out of bound shifts Recently running UBSAN caught few out of bound shifts in the iocforgivedebts function: UBSAN: shift-out-of-bounds in block/blk-iocost.c:2142:38 shift exponent 80 is too large for 64-bit typ...
CVE-2024-38809
Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...
AZL-78970 CVE-2024-34156 affecting package golang 1.25.7-1
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635...
CVE-2024-4671
creationtimestamp| type| source ---|---|--- 2024-05-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1285 2024-05-10 12:35:38+00:00| exploited| https://t.me/CyberSecurityIL/44812 2024-05-10 12:50:53+00:00| exploited| https://t.me/thehackernews/4938 2024-05-10...
CVE-2024-22412
ClickHouse is an open-source column-oriented database management system. A bug exists in the cloud ClickHouse offering prior to version 24.0.2.54535 and in github.com/clickhouse/clickhouse version 23.1. Query caching bypasses the role based access controls and the policies being enforced on roles...
KLA11294 Multiple vulnerabilities in Oracle Java SE, Java SE Embedded and JRockit
Multiple serious vulnerabilities were found in Oracle Java SE, Java SE Embedded and JRockit. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. A...
Internet Bug Bounty: PHP OpenSSL zif_openssl_seal() heap overflow (wild memcpy)
Description: A wild memcpy is discovered in the openssl package included in stable PHP release. During parsing a PEM certificate in opensslseal, an invalid key length is produced after parsing, eskl0 value is -1 after the call to EVPSealInit, subsequently causing a heap overflow via a wild memcpy...
kernel security and bug fix update
2.6.32-642.15.1 - net dccp: fix freeing skb too early for IPV6RECVPKTINFO Hannes Frederic Sowa 1424626 1424628 CVE-2017-6074 2.6.32-642.14.1 - net sctp: validate chunk len before actually using it Hangbin Liu 1399456 1399457 CVE-2016-9555 - netdrv qlcnic: add wmb call in transmit data path Harish...
[SECURITY] [DLA 484-1] graphicsmagick security update
Version : 1.3.16-1.1+deb7u1 CVE ID : CVE-2015-8808 CVE-2016-2317 CVE-2016-2318 CVE-2016-3714 CVE-2016-3715 CVE-2016-3716 CVE-2016-3717 CVE-2016-3718 Debian Bug : 814732 Several security vulnerabilities were discovered in graphicsmagick a tool to manipulate image files. GraphicsMagick is a fork of...