CVE-2024-11015

creationtimestamp| type| source ---|---|--- 2024-12-12 03:33:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113637748490132426 2024-12-12 06:17:44+00:00| seen| https://t.me/cvedetector/12705...

CVE-2024-44290

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, watchOS 11.1. An app may be able to determine a user’s current location...

CVE-2024-44201

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iPadOS 17.7.3, macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. Processing a malicious crafted file may lead to a denial-of-service...

CVE-2024-49111

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49075

Windows Remote Desktop Services Denial of Service Vulnerability...

CVE-2024-49068

Microsoft SharePoint Elevation of Privilege Vulnerability...

AZL-54374 CVE-2024-47538 affecting package gstreamer1-plugins-base 1.20.0-3

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

AZL-62399 CVE-2024-47538 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

CVE-2024-45404

OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious user who commits internal fraud can break through the two-factor authentication and hijack the...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, velero, kubeflow-pipelines, pulumi-kubernetes-operator, minio, kserve-modelmesh-serving, crossplane-provider-aws-route53, tailscale, step-issuer, flux-image-automation-controller, argo-rollouts, kubevela, kaniko, croc, temporal,...

CVE-2024-54527

creationtimestamp| type| source ---|---|--- 2024-12-12 00:59:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113637140264574364 2024-12-12 03:47:11+00:00| seen| https://t.me/cvedetector/12684 2024-12-12 09:59:39+00:00| seen| https://t.me/RussianOSINT/4978 2025-01-09 03:30:03+00:00|...

CVE-2024-54505

creationtimestamp| type| source ---|---|--- 2024-12-12 00:29:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113637022184981140 2024-12-12 03:47:06+00:00| seen| https://t.me/cvedetector/12681 2024-12-12 09:59:39+00:00| seen| https://t.me/RussianOSINT/4978...

CVE-2024-4109

Rejected reason: Red Hat Product Security has determined that this CVE is not a security vulnerability...

UBUNTU-CVE-2024-47538

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

CVE-2024-54474

creationtimestamp| type| source ---|---|--- 2024-12-11 23:44:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113636844995006519...

CVE-2024-54465

creationtimestamp| type| source ---|---|--- 2024-12-11 23:29:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113636785997633881...

CVE-2024-54466

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An encrypted volume may be accessed by a different user without prompting for the password...

CVE-2024-54476

CVE-2024-54476 affects macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. Root cause: improved checks that mitigate an issue where an app could access user‑sensitive data. Impact: unauthorized data access. Remediation: apply the published macOS updates (Sequoia 15.2, Ventura 13.7....

CVE-2024-54508

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2024-54510

CVE-2024-54510 describes a race condition vulnerability in Apple platforms. The NVD entry states a race condition was addressed with improved locking and that the issue could allow an app to leak sensitive kernel state, fixed in iPadOS 17.7.3, watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2...