CVE-2024-53058

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data In case the non-paged data of a SKB carries protocol header and protocol payload to be transmitted on a certain platform that the DMA AXI address width is...

CVE-2024-53077

In the Linux kernel, the following vulnerability has been resolved: rpcrdma: Always release the rpcrdmadevice's xaarray Dai pointed out that the xainitflags in rpcrdmaaddone needs to have a matching xadestroy in rpcrdmaremoveone to release underlying memory that the xarray might have accrued duri...

CVE-2024-53070

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: fix fault at system suspend if device was already runtime suspended If the device was already runtime suspended then during system suspend we cannot access the device registers else it will crash. Also we cannot access...

CVE-2024-53051

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in intelhdcpgetcapability Sometimes during hotplug scenario or suspend/resume scenario encoder is not always initialized when intelhdcpgetcapability add a check to avoid kernel null pointer...

CVE-2024-48990

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable...

CVE-2024-11195

creationtimestamp| type| source ---|---|--- 2024-11-19 11:11:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113509312880725172 2024-11-19 13:27:54+00:00| seen| https://t.me/cvedetector/11441...

CVE-2024-50269

In the Linux kernel, the following vulnerability has been resolved: usb: musb: sunxi: Fix accessing an released usb phy Commit 6ed05c68cbca "usb: musb: sunxi: Explicitly release USB PHY on exit" will cause that usb phy @glue-xceiv is accessed after released. 1 register platform driver...

CVE-2024-52303 vulnerabilities

Vulnerabilities for packages: checkov, airflow, py3-aiohttp...

CVE-2023-44270

An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the...

CVE-2024-52573

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:32+00:00| seen| https://t.me/cvedetector/11352 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1527/ 2024-11-19 17:18:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113510756015313793...

CVE-2024-52318

Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue...

CVE-2024-48898

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from...

CVE-2024-11023

creationtimestamp| type| source ---|---|--- 2024-11-18 10:31:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113503493348466581 2024-11-18 13:12:21+00:00| seen| https://t.me/cvedetector/11325 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...

CVE-2024-11094

creationtimestamp| type| source ---|---|--- 2024-11-16 09:40:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113491970843217453 2024-11-16 11:53:19+00:00| seen| https://t.me/cvedetector/11230...

CVE-2017-13313

creationtimestamp| type| source ---|---|--- 2024-11-15 22:04:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113489233319357126 2024-11-16 00:10:03+00:00| seen| https://t.me/cvedetector/11197...

CVE-2024-11258

creationtimestamp| type| source ---|---|--- 2024-11-15 20:05:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113488766514977825 2024-11-15 21:39:18+00:00| seen| https://t.me/cvedetector/11179...

CVE-2024-47759

GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. The script will then be executed when any user will try to see the document contents. Upgrade to 10.0.17...

CVE-2024-48284

creationtimestamp| type| source ---|---|--- 2024-11-14 17:54:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113482587150876500...

CVE-2024-10921

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

CVE-2024-50837

creationtimestamp| type| source ---|---|--- 2024-11-14 15:04:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113481919699228585 2024-11-14 16:39:39+00:00| seen| https://t.me/cvedetector/10963...