CVE-2023-48789

Fortinet FortiPortal suffers a vulnerability (CVE-2023-48789) due to client-side enforcement of server-side security that can allow improper access control via specially crafted HTTP requests. Affected software: FortiPortal versions 6.0.0 through 6.0.14. Root cause: insecure client-side security ...

CVE-2024-27776

CVE-2024-27776 affects MileSight DeviceHub. The issue is a CWE-22 path traversal vulnerability that may allow unauthenticated remote code execution over the network (no user interaction) with a CVSS v3.1 base score of 9.8 (CRITICAL). Root cause is improper limitation of a pathname to a restricted...

CVE-2024-4358

creationtimestamp| type| source ---|---|--- 2024-05-30 13:10:48+00:00| published-proof-of-concept| https://t.me/HackingInsights/1164 2024-06-03 12:53:24+00:00| published-proof-of-concept| https://t.me/orderofsixangles/2311 2024-06-04 09:30:41+00:00| seen| https://t.me/lostsec/565 2024-06-04...

PT-2024-14761 · Canonical +1 · Linux +109

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-3721

creationtimestamp| type| source ---|---|--- 2024-05-12 07:03:09+00:00| published-proof-of-concept| https://t.me/CNArsenal/2452 2024-05-12 07:03:15+00:00| published-proof-of-concept| Telegram/iVgfHplacJEpT4rWtryJFXtFKeaBDadlcEFrO5VYeH14xfY- 2024-10-24 00:00:00+00:00| exploited| The Shadowserver...

Security Bulletin: Common vulnerabilities fixed in Cloudera Data Platform 7.1.9 HF2

Summary Fixes to common vulnerabilities discovered in Cloudera Data Platform 7.1.9 are available to download from Cloudera. Vulnerability Details CVEID:CVE-2021-28170 DESCRIPTION: Eclipse EE4J Jakarta Expression Language could allow a remote attacker to bypass security restrictions, caused by a...

BELL-CVE-2024-27007

Bulletin has no description...

SUSE CVE-2023-22059

unknown...

CVE-2024-27956

creationtimestamp| type| source ---|---|--- 2024-04-25 20:40:42+00:00| seen| https://t.me/CyberSecurityIL/43564 2024-04-26 08:00:07+00:00| exploited| https://t.me/thehackernews/4878 2024-04-26 09:03:37+00:00| exploited| https://t.me/KomunitiSiber/1850 2024-04-26 09:20:55+00:00| exploited|...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability CVE-2024-4040 CrushFTP VFS Sandbo...

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

CVE-2024-21105

...

CVE-2024-21054

...

CVE-2024-21002

...

CVE-2024-20998

...

SUSE CVE-2021-47188

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Improve SCSI abort handling The following has been observed on a test setup: WARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcdqueuecommand+0x468/0x65c Call trace: ufshcdqueuecommand+0x468/0x65c...

编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

CVE-2024-2389

creationtimestamp| type| source ---|---|--- 2024-04-05 12:00:07+00:00| seen| https://t.me/truesecator/5605 2024-04-09 20:45:42+00:00| seen| https://t.me/arpsyndicate/4419 2024-04-22 18:50:45+00:00| seen| https://t.me/arpsyndicate/4733 2024-04-25 04:35:58+00:00| published-proof-of-concept|...

CVE-2007-3644

creationtimestamp| type| source ---|---|--- 2024-03-25 11:49:23+00:00| seen| https://t.me/ETHICALHACKERSCOMMUNITY2/3889 2024-03-25 14:38:09+00:00| seen| Telegram/HKj6TR4hMohrGsEUcNFDijNGdim3MCZhggfzha3EYtXw 2024-03-25 14:38:09+00:00| seen| https://t.me/tengkorakcybercrewz/4400 2024-03-25...