6899 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the complexity of the mmapregion function, which leads to control flow disruption and the creation of multip...
GHSA-27WF-5967-98GX vulnerabilities
Vulnerabilities for packages: nodetaint, argocd-image-updater, ip-masq-agent, aws-efs-csi-driver, argocd-image-updater-fips, kubeflow-pipelines, local-static-provisioner-fips, aws-efs-csi-driver-fips, local-static-provisioner, rancher-webhook, rancher-webhook-fips, kubernetes-dns-node-cache,...
Exploit for Code Injection in Vmware Spring_Cloud_Data_Flow
CVE-2024-37084 Vulnerability Exploitation Example PoC CVE-2...
Flowise OverrideConfig security vulnerability
Impact Flowise allows developers to inject configuration into the Chainflow during execution through the overrideConfig option. This is supported in both the frontend web integration and the backend Prediction API. This has a range of fundamental issues that are a major security vulnerability...
AZL-53783 CVE-2024-53426 affecting package ntopng 5.2.1-4
A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function...
CVE-2024-53426
A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function...
CVE-2024-53426
A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function...
AZL-53513 CVE-2024-53426 affecting package ntopng 5.2.1-6
A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function...
UBUNTU-CVE-2024-53426
A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function...
CVE-2024-52067
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...
CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...
CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...
CVE-2024-52067
CVE-2024-52067 affects Apache NiFi 1.16.0–1.28.0 and 2.0.0-M1–2.0.0-M4. The issue is optional debug logging of Parameter Context values during flow synchronization, which an authorized admin could enable to write parameter names and values to logs. Deployments with the default Logback config do n...
CVE-2024-52067 Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context values during the flow synchronization process. An authorized administrator with access to change logging levels could enable debug logging for framework flow synchronization, causi...
ntopng 安全漏洞
ntopng is a web-based network traffic monitoring application from ntop open source. A security vulnerability exists in ntopng version 6.2, which stems from a heap buffer overflow vulnerability in the Flow::dissectMDNS function...
authentik 授权问题漏洞
authentik is an open source identity provisioning application from authentik Open Source. An authorization issue vulnerability exists in authentik that stems from when clientcredentials or devicecodeOAuth authorization is used, resulting in an attacker obtaining a token from Authentik...
CVE-2024-53426
A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function...
PT-2024-35736 · Ntopng · Ntopng
Name of the Vulnerable Software and Affected Versions: ntopng version 6.2 Description: A heap-buffer-overflow issue has been identified in the Flow::dissectMDNS function. This issue can potentially lead to a buffer overflow, which may cause the program to crash or execute arbitrary code...
CVE-2024-53426
CVE-2024-53426 (ntopng 6.2) has a heap-buffer-overflow in the function flow::dissectMDNS. Multiple sources confirm the vulnerable component is ntopng version 6.2 and specifically the Flow::dissectMDNS code path. Impact is described as a heap overflow that could crash the process and, in some repo...