22177 matches found
CVE-2024-51428
The Espressif Esp idf development framework (version 5.3.0 ) is vulnerable to a Denial of Service (DoS) condition. This issue arises when an attacker sends a specially crafted data channel packet to the affected system. While the documents indicate that a patch may not be immediately available, i...
Google Chrome Security Update (stable-channel-update-for-desktop-2024-11) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
UBUNTU-CVE-2024-50096
In the Linux kernel, the following vulnerability has been resolved: nouveau/dmem: Fix vulnerability in migratetoram upon copy error The nouveaudmemcopyone function ensures that the copy push command is sent to the device firmware but does not track whether it was executed successfully. In the cas...
kernel: dmaengine: fix NULL pointer in channel unregistration function
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistration function The Linux kernel CVE team has assigned CVE-2023-52492 to this issue. Upstream advisory:...
kernel: dmaengine: fix NULL pointer in channel unregistration function
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistration function The Linux kernel CVE team has assigned CVE-2023-52492 to this issue. Upstream advisory:...
RHEL 5 : kernel (RHSA-2018:2171)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2171 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An industry-wide issue was found in the way man...
Stable Channel Update for Desktop
The Stable channel has been updated to 130.0.6723.116/.117 for Windows, Mac and 130.0.6723.116 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 130.0.6723.117 for Windows and Mac...
CVE-2024-51326
creationtimestamp| type| source ---|---|--- 2024-11-04 20:17:56+00:00| seen| https://t.me/cvedetector/9773...
CVE-2024-10737
creationtimestamp| type| source ---|---|--- 2024-11-03 16:41:14+00:00| seen| https://t.me/cvedetector/9654...
Gnutls: timing side-channel in the rsa-psk authentication
...
CVE-2024-50356
creationtimestamp| type| source ---|---|--- 2024-10-31 20:17:04+00:00| seen| https://t.me/cvedetector/9518...
CVE-2020-12828
creationtimestamp| type| source ---|---|--- 2024-10-31 02:10:22+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1349...
openSUSE 15 Security Update : Botan (openSUSE-SU-2024:0343-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0343-1 advisory. - Fixed CVE-2024-50382, CVE-2024-50383 - various compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan...
Security Bulletin: Multiple vulnerabilities in Java affect IBM Business Automation Workflow - July 2024 CPU
Summary IBM Business Automation Workflow containers package IBM® Java SDK 8 V21.0.3 or IBM® Semeru Runtime 17 V24.0.0. Information about security vulnerabilities in these Java runtumes have been published. IBM Business Automation Workflow includes IBM Java 8. Vulnerability Details...
OPENSUSE-SU-2024:0343-1 Security update for Botan
This update for Botan fixes the following issues: - Fixed CVE-2024-50382, CVE-2024-50383 - various compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan...
Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code
Cybersecurity researchers have discovered a new malicious Python package that masquerades as a cryptocurrency trading tool but harbors functionality designed to steal sensitive data and drain assets from victims' crypto wallets. The package, named "CryptoAITools," is said to have been distributed...
SUSE CVE-2024-49768
Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the...
Mattermost Information Disclosure Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an information disclosure vulnerability that stems from an inability to properly filter channel data, which can be exploited by an attacker to obtain private channel names using...
The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its use of an unprotected communication channel for data transmission, allowing attackers to gain unauthorized access to confidential information.
The vulnerability of Acronis Cyber Protect 16 data protection software lies in the use of an unprotected communication channel for data transmission. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to confidential information...