CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

CVE-2024-54132

The GitHub CLI is GitHub’s official command line tool. A security vulnerability has been identified in GitHub CLI that could create or overwrite files in unintended directories when users download a malicious GitHub Actions workflow artifact through gh run download. This vulnerability stems from ...

CVE-2024-53614

creationtimestamp| type| source ---|---|--- 2024-12-04 15:56:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113595368251611466 2024-12-04 17:35:56+00:00| seen| https://t.me/cvedetector/12010...

CVE-2024-53133

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handle dml allocation failure to avoid crash Why In the case where a dml allocation fails for any reason, the current state's dml contexts would no longer be valid. Then subsequent calls dcstatecopyinternal would...

CVE-2024-53131

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in blocktouchbuffer tracepoint Patch series "nilfs2: fix null-ptr-deref bugs on block tracepoints". This series fixes null pointer dereference bugs that occur when using nilfs2 and two block-related...

CVE-2024-11466

creationtimestamp| type| source ---|---|--- 2024-12-04 07:41:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113593423701056140 2024-12-04 10:03:43+00:00| seen| https://t.me/cvedetector/11959...

CVE-2024-54661

creationtimestamp| type| source ---|---|--- 2024-12-04 04:17:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113592621576836574 2024-12-04 06:42:58+00:00| seen| https://t.me/cvedetector/11950 2025-01-07 01:35:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/...

GHSA-RFQ8-J7RH-8HF2

creationtimestamp| type| source ---|---|--- 2024-12-03 17:09:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113589996255229449...

CVE-2024-11866

creationtimestamp| type| source ---|---|--- 2024-12-03 08:37:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113587982303897166 2024-12-03 10:39:01+00:00| seen| https://t.me/cvedetector/11873...

CVE-2024-53987

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails = 7.1.0. A possible XSS vulnerability with certain configurations of Rails::HTML::Sanitiz...

CVE-2018-9431

creationtimestamp| type| source ---|---|--- 2024-12-02 21:40:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113585398538907403 2024-12-02 23:46:50+00:00| seen| https://t.me/cvedetector/11837...

CVE-2024-53727

creationtimestamp| type| source ---|---|--- 2024-12-02 18:21:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113584615741588286...

CVE-2024-53124

In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around sk-skforwardalloc Syzkaller reported this warning: ------------ cut here ------------ WARNING: CPU: 0 PID: 16 at net/ipv4/afinet.c:156 inetsockdestruct+0x1c5/0x1e0 Modules linked in: CPU: 0 UID: 0 PID: ...

CVE-2024-53115

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid nullptrderef in vmwframebuffersurfacecreatehandle The 'vmwuserobjectbuffer' function may return NULL with incorrect inputs. To avoid possible null pointer dereference, add a check whether the 'bo' is NULL in the...

CVE-2024-53121

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduced a two-step process for deleting FTEs: - Lock the FTE, delete it from hardware, set the hardware deletion function to NULL and unlock the FTE. - Lock...

CVE-2024-52455

creationtimestamp| type| source ---|---|--- 2024-12-02 14:06:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113583611905303056...

CVE-2024-43049

creationtimestamp| type| source ---|---|--- 2024-12-02 10:53:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113582852824328829 2024-12-02 12:53:47+00:00| seen| https://t.me/cvedetector/11753...

CVE-2024-51769

creationtimestamp| type| source ---|---|--- 2024-12-02 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1633/ 2025-09-09 20:51:37+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2024-22734

creationtimestamp| type| source ---|---|--- 2024-12-01 17:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9284 2024-12-02 01:01:21+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/113580525520491734 2024-12-02 02:01:26+00:00| published-proof-of-concept|...

CVE-2024-53787

creationtimestamp| type| source ---|---|--- 2024-11-30 21:14:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113573969395216897 2024-12-01 09:18:16+00:00| seen| https://t.me/cvedetector/11715...