Lucene search
+L

6426 matches found

OpenVAS
OpenVAS
•added 2024/11/29 12:00 a.m.•8 views

SUSE: Security Advisory (SUSE-SU-2024:4094-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.01027EPSS
SaveExploits0References11
Debian
Debian
•added 2024/11/28 3:54 p.m.•17 views

[SECURITY] [DLA 3971-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3971-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 28, 2024 https://wiki.debian.org/LTS -...

8.8CVSS9.5AI score0.00763EPSS
SaveExploits0
SUSE Linux
SUSE Linux
•added 2024/11/28 7:58 a.m.•8 views

Security update for frr

This update for frr fixes the following issues: Update to frr 8.5.6 jscPED-PED-11092 including fixes for: CVE-2024-44070,CVE-2024-34088,CVE-2024-31951,CVE-2024-31950, CVE-2024-31948,CVE-2024-27913,CVE-2023-47235,CVE-2023-47234, CVE-2023-46753,CVE-2023-46752,CVE-2023-41909,CVE-2023-41360,...

8.7CVSS6.8AI score0.02152EPSS
SaveExploits3References40
Tenable Nessus
Tenable Nessus
•added 2024/11/28 12:00 a.m.•23 views

Debian dla-3969 : thunderbird - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3969 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3969-1 [email protected]...

8.8CVSS7.7AI score0.00763EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
•added 2024/11/27 4:04 a.m.•10 views

SUSE CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.7CVSS6.6AI score0.00506EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/11/26 3:15 p.m.•33 views

CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS6.6AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/26 2:11 p.m.•20 views

CVE-2024-22117 Value of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS6.8AI score0.00506EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/26 2:11 p.m.•156 views

CVE-2024-22117

CVE-2024-22117 describes a bug in the map element URL handling where the system increments sysmapelementurlid and a manual change (sysmapelementurlid + 1) can prevent others from adding URLs. Public advisories (NVD entry and OSV listings) reference the same issue, with vendor advisories noting th...

2.2CVSS3.4AI score0.00506EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2024/11/26 2:11 p.m.•54 views

CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

2.2CVSS4.5AI score0.00506EPSS
SaveExploits0
Debian
Debian
•added 2024/11/26 9:44 a.m.•119 views

[SECURITY] [DLA 3966-1] pypy3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3966-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura November 26, 2024 https://wiki.debian.org/LTS -...

7.8CVSS6.4AI score0.13166EPSS
SaveExploits4
Vulnrichment
Vulnrichment
•added 2024/11/25 7:19 p.m.•41 views

CVE-2024-53258 download_all_submissions allows student to download another student's submissions in Autolab

Autolab is a course management service that enables auto-graded programming assignments. From Autolab versions v.3.0.0 onward students can download all assignments from another student, as long as they are logged in, using the downloadallsubmissions feature. This can allow for leakage of...

7.1CVSS6.7AI score0.00475EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/11/21 9:15 p.m.•20 views

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

6.4AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2024/11/21 9:15 p.m.•24 views

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS6.6AI score0.00666EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/11/21 8:41 p.m.•39 views

CVE-2024-52616 Avahi: avahi wide-area dns predictable transaction ids

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS0.00666EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/11/21 8:41 p.m.•19 views

CVE-2024-52616 Avahi: avahi wide-area dns predictable transaction ids

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS5.1AI score0.00666EPSS
SaveExploits0References4
CVE
CVE
•added 2024/11/21 8:41 p.m.•147 views

CVE-2024-52616

CVE-2024-52616 affects the Avahi-daemon. The vulnerability arises because DNS transaction IDs are initialized randomly only at startup and then incremented, making it possible for an attacker to predict IDs and perform DNS spoofing. The connected documents confirm the issue and reference the same...

5.3CVSS5AI score0.00666EPSS
SaveExploits0References4
Mend
Mend
•added 2024/11/21 8:41 p.m.•7 views

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

6.9CVSS0.00666EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/11/21 8:41 p.m.•30 views

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS6.3AI score0.00666EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2024/11/21 8:41 p.m.•12 views

CVE-2024-52616

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS7AI score0.00666EPSS
SaveExploits0
osv_cve
osv_cve
•added 2024/11/21 11:15 a.m.•22 views

CVE-2022-43935

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where Brocade Fabric OS Switch passwords and authorization IDs are printed in the embedded MLS DB file...

4.4CVSS5.8AI score0.00222EPSS
SaveExploits0References1
Rows per page
Query Builder