Lucene search
+L

7057 matches found

Openbugbounty
Openbugbounty
•added 2024/03/22 7:16 p.m.•9 views

moleskinefoundationcollection.org Cross Site Scripting vulnerability OBB-3884324

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/03/22 4:17 a.m.•14 views

SUSE CVE-2024-26643

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released fr...

6.4CVSS6.4AI score0.00204EPSS
SaveExploits0References21
osv_debian
osv_debian
•added 2024/03/21 11:15 a.m.•14 views

DEBIAN-CVE-2024-26643

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released fr...

5.5CVSS5.3AI score0.00204EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/03/21 11:15 a.m.•27 views

UBUNTU-CVE-2024-26643

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released fr...

7.8CVSS6AI score0.00204EPSS
SaveExploits0References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•4 views

CVE-2024-26643: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released fr...

7.8CVSS5.8AI score0.00204EPSS
SaveExploits0References18
Openbugbounty
Openbugbounty
•added 2024/03/20 11:39 p.m.•11 views

museumcollection.winterthur.org Cross Site Scripting vulnerability OBB-3881398

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Securelist
Securelist
•added 2024/03/20 11:00 a.m.•41 views

Android malware, Android malware and more Android malware

Introduction Malware for mobile devices is something we come across very often. In 2023, our technologies blocked 33.8 million malware, adware, and riskware attacks on mobile devices. One of 2023s most resonant attacks was Operation Triangulation, targeting iOS, but that was rather a unique case...

7.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/03/19 3:50 a.m.•11 views

SUSE CVE-2021-47109

In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUDNOARP entries to be forced GCed IFFPOINTOPOINT interfaces use NUDNOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that...

5.5CVSS7.8AI score0.0069EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2024/03/15 9:15 p.m.•23 views

CVE-2021-47109

In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUDNOARP entries to be forced GCed IFFPOINTOPOINT interfaces use NUDNOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that...

5.5CVSS7AI score0.0069EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2024/03/15 9:15 p.m.•11 views

DEBIAN-CVE-2021-47109

In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUDNOARP entries to be forced GCed IFFPOINTOPOINT interfaces use NUDNOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that...

5.5CVSS5.7AI score0.0069EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/03/15 9:15 p.m.•24 views

UBUNTU-CVE-2021-47109

In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUDNOARP entries to be forced GCed IFFPOINTOPOINT interfaces use NUDNOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that...

8.2CVSS6.6AI score0.0069EPSS
SaveExploits0References7
CVE
CVE
•added 2024/03/15 8:14 p.m.•116 views

CVE-2021-47109

CVE-2021-47109 concerns the Linux kernel neighbour GC: on IPv6, NUD_NOARP entries can be GCed, potentially overflowing the neighbour table for valid connections. The description notes the issue is more prevalent after the patch with commit 58956317c8de (“neighbor: Improve garbage collection”), wh...

7.5CVSS6.8AI score0.0069EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/15 8:14 p.m.•27 views

CVE-2021-47109 neighbour: allow NUD_NOARP entries to be forced GCed

In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUDNOARP entries to be forced GCed IFFPOINTOPOINT interfaces use NUDNOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that...

7.5CVSS7.1AI score0.0069EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/03/15 12:00 a.m.•9 views

Linux kernel security vulnerabilities

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from the neighbour module allowing NUDNOARP entries to be forcefully GCed...

5.5CVSS8.1AI score0.0069EPSS
SaveExploits0References6
Malwarebytes
Malwarebytes
•added 2024/03/14 5:08 p.m.•55 views

TikTok faces ban in US unless it parts ways with Chinese owner ByteDance

The House of Representatives has passed a bill that would effectively ban TikTok from the US unless Chinese owner ByteDance gives up its share of the immensely popular app. TikTok is an immensely popular social media platform that allows users to create, share, and discover, short video clips. It...

6.7AI score
SaveExploits0
NVD
NVD
•added 2024/03/13 4:15 p.m.•27 views

CVE-2024-28679

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

6.1CVSS6.1AI score0.00472EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/03/13 4:15 p.m.•22 views

CVE-2024-28679

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

6.1CVSS5.7AI score0.00472EPSS
SaveExploits1References1
Prion
Prion
•added 2024/03/13 4:15 p.m.•30 views

Cross site scripting

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

6.4AI score0.00472EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/13 12:00 a.m.•77 views

CVE-2024-28679

DedeCMS v5.7 is vulnerable to a cross-site scripting (XSS) attack within the Photo Collection feature. This flaw allows for the potential execution of malicious scripts in the user's browser. As a temporary workaround, it is recommended to disable the Photo Collection feature until a patch is rel...

6.1CVSS6.1AI score0.00472EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/03/13 12:00 a.m.•38 views

CVE-2024-28679

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

6.1AI score0.00472EPSS
SaveExploits1References1
Rows per page
Query Builder