9437 matches found
CVE-2024-6484
Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded...
DEBIAN-CVE-2024-37151
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When usin...
Suricata security breach
Suricata is a suite of network intrusion detection system IDS, intrusion prevention system IPS, and network security monitoring engine developed by the Open Information Security Foundation OISF and its supported vendors, which supports multi-threading, built-in IPv6, and the ability to load...
CVE-2007-0885
creationtimestamp| type| source ---|---|--- 2024-07-10 15:19:52+00:00| published-proof-of-concept| Telegram/urcLDQnCRDN1gckPAqtX7HqCuWDnXpTggZKHzO6od5XBRDmrA 2025-07-08 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75hehxz2z...
CVE-2024-38021
creationtimestamp| type| source ---|---|--- 2024-07-10 09:47:45+00:00| seen| https://t.me/kasperskyb2b/1337 2024-07-10 10:17:47+00:00| published-proof-of-concept| https://t.me/HackingInsights/5525 2024-07-10 10:17:47+00:00| seen| https://t.me/HackingInsights/5518 2024-07-11 01:21:43+00:00| seen|...
CVE-2024-32670
The CVE-2024-32670 entry relates to Samsung Galaxy SmartTag2 prior to version 0.20.04. The root cause is exposure of sensitive information via BLE advertising, which can allow an attacker to potentially identify the tag’s location. Affected product: Samsung Galaxy SmartTag2; affected component/fu...
Pepperl+Fuchs Multiple Products Information Disclosure Vulnerability
Pepperl+Fuchs OIT Series is a series of high-temperature identification systems from Pepperl+Fuchs, Germany. An information disclosure vulnerability exists in various Pepperl+Fuchs products, which originates from an unauthenticated, remote attacker being able to read sensitive device information...
CVE-2024-22271
creationtimestamp| type| source ---|---|--- 2024-07-09 15:36:55+00:00| seen| https://t.me/cvedetector/349...
Windows Kernel Information Disclosure Vulnerability
...
Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories
Unknown threat actors have been found propagating trojanized versions of jQuery on npm, GitHub, and jsDelivr in what appears to be an instance of a "complex and persistent" supply chain attack. "This attack stands out due to the high variability across packages," Phylum said in an analysis...
BELL-CVE-2024-39485
Bulletin has no description...
BELL-CVE-2024-39473
Bulletin has no description...
CGA-RFXQ-6Q3J-J6MJ
Bulletin has no description...
CVE-2024-39931
creationtimestamp| type| source ---|---|--- 2024-07-04 18:56:14+00:00| seen| https://t.me/cvedetector/59 2024-07-08 12:33:12+00:00| seen| https://t.me/truesecator/5943 2024-07-08 13:16:59+00:00| seen| Telegram/BsDKi1NO35aX5jFw-nQrwozL1BDFKqIrJaNXO44sTuUJDa1q 2025-06-24 04:48:49+00:00|...
org.bouncycastle: Use of Incorrectly-Resolved Name or Reference
A flaw was found in Bouncy Castle Java Cryptography APIs. Affected versions of this package are vulnerable to a use of incorrectly-resolved name or reference issue when resolving domain names over an SSL socket that was created without an explicit hostname, such as in the HttpsURLConnection...
kernel: wifi: nl80211: reject iftype change with mesh ID change
CVE-2024-27410 is a vulnerability in the Linux kernel’s Wi-Fi subsystem, affecting the nl80211 interface. The issue occurs when a mesh ID is set while simultaneously switching the interface to mesh mode, which can overwrite critical data in the wireless device's configuration. This can lead to...
The vulnerability of the IBM WebSphere Application Server application server, related to errors in checking cryptographic signatures, allows a hacker to replace the identification data.
The vulnerability of the IBM WebSphere Application Server application server is related to errors in checking the cryptographic signature. Exploiting this vulnerability can allow a malicious actor to replace the identification data remotely...
CVE-2024-5655
creationtimestamp| type| source ---|---|--- 2024-06-26 22:53:18+00:00| seen| https://t.me/techb0ltGenona/4537 2024-06-28 04:04:27+00:00| published-proof-of-concept| https://t.me/HackingInsights/3920 2024-06-28 13:05:27+00:00| seen| https://t.me/truesecator/5912 2024-06-28 16:26:34+00:00| seen|...
[SECURITY] [DSA 5720-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5720-1 [email protected] https://www.debian.org/security/ Andres Salomon June 25, 2024 https://www.debian.org/security/faq -...
