CVE-2024-57626

CVE-2024-57626 affects MonetDB Server v11.49.1 in the mat_join2 component. The issue allows an attacker to cause a Denial of Service by sending crafted SQL statements. The connected sources confirm the vulnerability and the affected product/component, but do not provide explicit root-cause detail...

CVE-2024-57634

CVE-2024-57634 affects MonetDB Server, specifically the exp_copy component in v11.49.1. The issue allows an attacker to trigger a Denial of Service via crafted SQL statements. The impact is DoS with availability loss; there is no explicit exploitation detail in the provided documentation beyond t...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1057)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2025-1018)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-57656

Summary of CVE-2024-57656 (CVE-2024-57656) : OpenLink Virtuoso Open-Source v7.2.11 contains a DoS vulnerability in the sqlc_add_distinct_node component triggered by crafted SQL statements, as documented in multiple security advisories. The issue affects virtuoso-opensource in affected deployments...

CVE-2024-57653

An issue in the qstvecsetcopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57632

CVE-2024-57632 affects MonetDB Server v11.49.1, with a flaw in the is_column_unique component that can cause Denial of Service via crafted SQL statements. CVSSv3.1 base score 7.5 (Network attack, low complexity, no privileges, high availability impact). Connected sources corroborate the affected ...

CVE-2024-57646

CVE-2024-57646 affects the psiginfo component of openlink virtuoso-opensource v7.2.11, enabling a Denial of Service via crafted SQL statements. Connected advisories (ALAS-2025-2755 / ALAS2-2025-2755) document remediation by upgrading virtuoso-opensource to 7.2.14-2 (and related packages). Remedia...

CVE-2024-51491

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List CRL based revocation check feature. After retrieving the CRL, notation-go...

CVE-2025-22615 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the CadastroAtendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts...

CVE-2025-22142

creationtimestamp| type| source ---|---|--- 2025-01-13 19:59:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113822816616033754 2025-01-13 20:07:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1369 2025-01-13 22:05:40+00:00| seen|...

CVE-2024-44771

creationtimestamp| type| source ---|---|--- 2025-01-13 18:22:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113822434675262534 2025-01-13 21:15:27+00:00| seen| https://t.me/cvedetector/15167 2025-01-14 18:02:21+00:00| seen|...

CVE-2024-6352

A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert...

CVE-2025-22344

creationtimestamp| type| source ---|---|--- 2025-01-13 14:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdwgzqz2p 2025-01-13 15:42:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfn37v5slo2w 2025-01-13 16:14:22+00:00| seen|...

CVE-2024-52936

CVE-2024-52936 involves Imagination Technologies’ PowerVR-GPU and related GPU driver components where kernel software running inside a guest VM can issue improper commands to the GPU firmware, enabling writes outside the guest’s virtualized GPU memory. The root cause is an out-of-bounds/write acc...

CVE-2024-52935

creationtimestamp| type| source ---|---|--- 2025-01-13 10:35:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113820600853245200 2025-01-13 11:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmmcdabjd2d 2025-01-13 11:47:32+00:00| seen|...

Advisory ROSA-SA-2025-2565

software: mcpp 2.7.2 OS: ROSA-CHROME packageevrstring: mcpp-2.7.2-14 CVE-ID: CVE-2019-14274 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Heap-based buffer overflow vulnerability in MCPP in domsg in support.c. CVE-STATUS: The vulnerability has been resolved CVE-REV: To close the vulnerability, run the...

CVE-2025-0406

creationtimestamp| type| source ---|---|--- 2025-01-13 01:36:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113818481083937989 2025-01-13 02:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lflo56cffs2d 2025-01-13 02:47:57+00:00| seen|...

CVE-2024-42181

creationtimestamp| type| source ---|---|--- 2025-01-12 22:08:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113817664516251519 2025-01-12 22:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lflapabypp2n 2025-01-12 22:52:41+00:00| seen|...

[SECURITY] Fedora 40 Update: suricata-7.0.8-1.fc40

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...