PT-2024-11665 · Ibm · Ibm Spss Statistics

Name of the Vulnerable Software and Affected Versions: IBM SPSS Statistics versions 26.0 through 28.0 Description: The issue allows a local user to create multiple files, potentially exhausting the file handles capacity and causing a denial of service. Recommendations: For versions 26.0 through...

CVE-2024-24310

creationtimestamp| type| source ---|---|--- 2024-02-23 23:26:24+00:00| seen| https://t.me/ctinow/192291 2024-02-23 23:32:11+00:00| seen| https://t.me/ctinow/192303 2024-03-14 02:21:37+00:00| seen| https://t.me/ctinow/207369...

CVE-2024-1098

creationtimestamp| type| source ---|---|--- 2024-01-31 13:32:20+00:00| seen| https://t.me/ctinow/176715 2024-02-05 23:16:10+00:00| seen| https://t.me/ctinow/179578 2024-02-22 13:12:27+00:00| seen| https://t.me/ctinow/190698...

CVE-2023-49688

creationtimestamp| type| source ---|---|--- 2023-12-22 01:22:00+00:00| seen| https://t.me/ctinow/158125 2023-12-27 23:17:21+00:00| seen| https://t.me/ctinow/159823...

CVE-2023-49752

creationtimestamp| type| source ---|---|--- 2023-12-20 19:25:43+00:00| seen| https://t.me/ctinow/157243 2024-01-13 17:21:35+00:00| seen| https://t.me/ctinow/167876...

CVE-2023-6119

An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a higher privilege level. This is caused by GetSusp not correctly protecting a directory that it creates during execution...

Privilege escalation

An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a higher privilege level. This is caused by GetSusp not correctly protecting a directory that it creates during execution...

PT-2023-32527 · Trellix · Trellix Getsusp

Name of the Vulnerable Software and Affected Versions: Trellix GetSusp versions prior to 5.0.0.27 Description: The issue is caused by improper privilege management, allowing a local, low-privilege attacker to gain access to files that usually require a higher privilege level. This occurs because...

USN-6429-2 curl vulnerability

USN-6429-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that curl incorrectly handled cookies when an application duplicated certain handles. A local attacker...

RHSA-2023:4650

creationtimestamp| type| source ---|---|--- 2023-08-15 03:29:25+00:00| seen| https://t.me/CyberWatchinsider/24 2023-08-15 03:29:35+00:00| seen| https://t.me/CyberWatchinsider/25...

OESA-2023-1346 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: An information disclosure vulnerability exists in curl v8.1.0 when doing HTTPS transfers, libcurl might erroneously use the read callback...

DEBIAN-CVE-2023-27537

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

Debian dla-3346 : python-werkzeug - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3346 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3346-1 [email protected]...

High resource usage when parsing multipart form data with many fields

Werkzeug's multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a small amount of bytes, but each requires CPU time to parse and may use more memory as Python data. If a request can be made to an endpoint that accesses request.data, request.form,...

SUSE CVE-2004-1174

direntry.c in Midnight Commander mc 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."...

SUSE CVE-2010-2943

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...

SUSE CVE-2014-5352

The krb5gssprocesscontexttoken function in lib/gssapi/krb5/processcontexttoken.c in the libgssapikrb5 library in MIT Kerberos 5 aka krb5 through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to...

SUSE CVE-2020-21831

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read2004sectionhandles ../../src/decode.c:2637...

SUSE CVE-2022-22058

Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

SUSE CVE-2022-22750

By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged process should not have access to.This bug only affects Firefox for Windows and MacOS. Other operating...