2391 matches found
BELL-CVE-2024-26724
Bulletin has no description...
AZL-37140 CVE-2023-45927 affecting package slang 2.3.2-4
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
CVE-2024-27207
Exported broadcast receivers allowing malicious apps to bypass broadcast protection...
CVE-2024-26339
swftools v0.9.2 was discovered to contain a strcpy parameter overlap via /home/swftools/src/swfc+0x48318a...
UBUNTU-CVE-2024-26461
Kerberos 5 aka krb5 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c...
CVE-2024-21351
Windows SmartScreen Security Feature Bypass Vulnerability...
GHSA-C4CM-R9FH-JGJ9 commonground-api-common unexploitable privilege escalation in JWT authentication middleware
Impact This is a privilege escalation vulnerability. The impact is negligible and entirely theoretical. A non-exploitable weakness was found in how the client-supplied JWTs are verified. Because an explicit allow-list of known algorithms is used in the PyJWT library, user-supplied invalid...
CVE-2024-0971
A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content...
CVE-2024-20666
BitLocker Security Feature Bypass Vulnerability...
CVE-2024-20676
Azure Storage Mover Remote Code Execution Vulnerability...
GHSA-H63J-XQX6-W58R mvel2 TimeOut error exists in the ParseTools.subCompileExpression method
A TimeOut error exists in the ParseTools.subCompileExpression method in mvel2 v2.5.0 Final...
CVE-2023-35622
Windows DNS Spoofing Vulnerability...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-36027
Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...
GHSA-3F38-96QM-R3FW esptool allows attackers to view sensitive information via weak cryptographic algorithm
An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...
CVE-2023-42493
EisBaer Scada - CWE-256: Plaintext Storage of a Password...
PaperCut MF < 20.1.9 / 21.x < 21.2.13 / 22.x < 22.1.3 Multiple Vulnerabilities
The version of PaperCut MF installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - An authentication bypass exists that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut hostâs file storage. This could exhaust system...
AZL-28833 CVE-2023-38039 affecting package mysql for versions less than 8.0.35-1
When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of header...