603 matches found
CVE-2024-1728
creationtimestamp| type| source ---|---|--- 2024-04-12 06:48:58+00:00| seen| https://t.me/arpsyndicate/4544 2024-10-09 22:49:03+00:00| published-proof-of-concept| https://t.me/codeb0ss/1613 2025-02-05 16:00:09+00:00| published-proof-of-concept| Telegram/DvuDNxzeYZP63w5nmwzbWYZFvCKfCkB4qbONMONwQIS...
CVE-2024-2029
creationtimestamp| type| source ---|---|--- 2024-04-12 05:26:43+00:00| seen| https://t.me/arpsyndicate/4526 2025-07-21 18:57:10+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/localaicve20242029...
CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2
CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2. A patched version of the package is available...
CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2
CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2. An upgraded version of the package is available that resolves this issue...
AZL-39505 CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
AZL-38575 CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 XZ Backdoor Tools This repository contains to...
CVE-2024-31139
In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector...
CVE-2024-31139
In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector...
CVE-2023-6014
creationtimestamp| type| source ---|---|--- 2024-03-27 16:42:02+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/mlflowcve20236014...
PT-2024-2543 · Jetbrains · Teamcity
Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.03 Description: The issue is related to incorrect restriction of XML external entity references in the continuous integration and delivery system. This could allow a remote attacker to conduct XXE...
CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1
CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1
CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1
CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.15-1
CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...
SUSE CVE-2021-47133
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix memory leak in amdsfhwork Kmemleak tool detected a memory leak in the amdsfh driver. ==================== unreferenced object 0xffff88810228ada0 size 32: comm "insmod", pid 3968, jiffies 4295056001 age 775.792s h...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: rqlite, tflint, goreleaser, secrets-store-csi-driver-provider-azure, kyverno-policy-reporter, crossplane-provider-aws-cloudformation, temporal-ui-server, src, aactl, kubernetes-csi-external-resizer, cosign, rabbitmq-cluster-operator, step-ca, capslock, terraform-docs...
AZL-37119 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: k8sgpt-operator, step-ca, k3d, supercronic, crossplane-provider-aws-eks, crossplane-provider-azure-authorization, policy-controller, prometheus-operator, gomplate, vertical-pod-autoscaler, kyverno-policy-reporter-kyverno-plugin, crossplane-provider-aws-iam,...
AZL-35667 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.15-2
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...