Lucene search
+L

5807 matches found

Github Security Blog
Github Security Blog
added 2024/11/29 6:34 p.m.22 views

NULL Pointer Dereference on moby image history

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

6.5CVSS7AI score0.00786EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2024/11/29 6:15 p.m.10 views

AZL-53828 CVE-2024-36620 affecting package moby-engine for versions less than 25.0.3-9

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

6.5CVSS7.4AI score0.00786EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/29 11:07 a.m.14 views

OESA-2024-2492 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump history to record instructions that performed register spill/fi...

7.8CVSS6.4AI score0.00664EPSS
SaveExploits0References80
Debian CVE
Debian CVE
added 2024/11/29 12:00 a.m.14 views

CVE-2024-36620

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

6.5CVSS6.3AI score0.00786EPSS
SaveExploits0
OSV
OSV
added 2024/11/29 12:00 a.m.11 views

CVE-2024-53507

A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems...

9.8CVSS7.9AI score
SaveExploits0References4
NVD
NVD
added 2024/11/27 3:15 p.m.20 views

CVE-2024-52951

Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History...

8CVSS0.01142EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2024/11/27 4:04 a.m.7 views

SUSE CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox 133 and Thunderbird 133...

6.5CVSS8.3AI score0.00538EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/11/27 12:00 a.m.28 views

CVE-2024-52951

Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History...

0.01142EPSS
SaveExploits1References3
CVE
CVE
added 2024/11/27 12:00 a.m.54 views

CVE-2024-52951

CVE-2024-52951 describes a stored cross-site scripting (XSS) vulnerability in Omada Identity’s Access Request History prior to version 15 update 1. An authenticated attacker can trigger arbitrary JavaScript execution in a victim’s browser by sending a specially crafted link or by viewing a manipu...

8CVSS6.6AI score0.01142EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/11/27 12:00 a.m.7 views

Omada Identity 跨站脚本漏洞

Omada Identity is an identity governance solution from Omada Identity. Omada Identity suffers from a cross-site scripting vulnerability that stems from the presence of a stored cross-site scripting vulnerability that allows an attacker to execute arbitrary code in a victim's browser via a special...

8CVSS6.5AI score0.01142EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/11/27 12:00 a.m.6 views

PT-2024-35498 · Omada · Omada Identity

Name of the Vulnerable Software and Affected Versions: Omada Identity versions prior to 15 update 1 Description: The issue allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History. This is...

8CVSS6.8AI score0.01142EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2024/11/27 12:00 a.m.10 views

CVE-2024-52951

Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History...

6.5AI score0.01142EPSS
SaveExploits1References3
OSV
OSV
added 2024/11/26 2:15 p.m.8 views

CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox 133 and Thunderbird 133...

7.5CVSS5.8AI score0.00538EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/26 2:15 p.m.7 views

UBUNTU-CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox 133 and Thunderbird 133...

7.5CVSS5.8AI score0.00538EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2024/11/26 1:03 p.m.499 views

Exploit for Deserialization of Untrusted Data in Alibaba Fastjson

CVE-2022-25845-In-Spring !Languagehttps://img.shields.io/b...

9.8CVSS7.4AI score0.18743EPSS
SaveExploits6
Positive Technologies
Positive Technologies
added 2024/11/26 12:00 a.m.6 views

PT-2024-9962

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 133 Thunderbird versions prior to 133 Description: The issue is related to the Private Browsing Mode in Mozilla Firefox and Thunderbird on Android operating systems. It involves the potential for sensitive...

9.8CVSS8.5AI score0.00693EPSS
SaveExploits0References255
Tenable Nessus
Tenable Nessus
added 2024/11/26 12:00 a.m.19 views

Mozilla Thunderbird < 133.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 133.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-67 advisory. - A double-free issue could have occurred in secpkcs7decoderstartdecrypt when handling an error path. Unde...

9.8CVSS7.5AI score0.00919EPSS
SaveExploits0References17
OSV
OSV
added 2024/11/22 11:07 a.m.10 views

OESA-2024-2448 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump history to record instructions that performed register spill/fi...

7.8CVSS6.2AI score0.00376EPSS
SaveExploits0References23
OSV
OSV
added 2024/11/22 11:07 a.m.20 views

OESA-2024-2447 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump history to record instructions that performed register spill/fi...

7.8CVSS6.1AI score0.00376EPSS
SaveExploits0References22
NVD
NVD
added 2024/11/19 5:15 p.m.11 views

CVE-2024-51885

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Takashi Matsuyama Browsing History browsing-history allows Stored XSS.This issue affects Browsing History: from n/a through = 1.3.1...

6.5CVSS0.00325EPSS
SaveExploits0References1
Rows per page
Query Builder