153 matches found
DEBIAN-CVE-2024-41050
In the Linux kernel, the following vulnerability has been resolved: cachefiles: cyclic allocation of msgid to avoid reuse Reusing the msgid after a maliciously completed reopen request may cause a read request to remain unprocessed and result in a hung, as shown below: t1 | t2 | t3...
UBUNTU-CVE-2024-41050
In the Linux kernel, the following vulnerability has been resolved: cachefiles: cyclic allocation of msgid to avoid reuse Reusing the msgid after a maliciously completed reopen request may cause a read request to remain unprocessed and result in a hung, as shown below: t1 | t2 | t3...
CVE-2022-48817
creationtimestamp| type| source ---|---|--- 2024-07-16 15:26:38+00:00| seen| https://t.me/cvedetector/949...
PT-2024-29229
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the cachefiles function in the Linux kernel, where the reuse of msg id after a maliciously completed reopen request can cause a read request to remain...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a denial of service when processing DL NAS transport messages when the message ID is not defined in the 3GPP specification...
RHSA-2024:0757
creationtimestamp| type| source ---|---|--- 2024-02-08 19:22:03+00:00| seen| https://t.me/ctinow/181558...
GHSA-C8V3-JHV9-4PPC
creationtimestamp| type| source ---|---|--- 2024-01-23 21:26:23+00:00| seen| https://t.me/ctinow/172314...
CVE-2015-6934
creationtimestamp| type| source ---|---|--- 2024-01-07 07:25:21+00:00| seen| https://t.me/arpsyndicate/2624...
CVE-2021-46896
Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332...
Rocket.Chat: IDOR vulnerability leads to Deleting message after leaving/getting banned from group using message ID
The vulnerability discovered was an IDOR Insecure Direct Object Reference vulnerability. The issue allowed a user to delete messages in a channel they had been banned from or left, using the message ID obtained from a previous message sent in the channel. This vulnerability existed because the...
Basecamp: Spam & Clearance checks disabled with existing referenced Message-ID
A vulnerability in the inbound email processing allowed crafted emails to bypass spam filtering and The Screener when they appeared to be in reply to an existing thread...
CVE-2023-27652
creationtimestamp| type| source ---|---|--- 2023-04-20 18:30:57+00:00| seen| https://t.me/cibsecurity/62529...
Rocket.Chat actionLinkHandler Information Disclosure Vulnerability
Rocket.Chat is an open source team chat software. Rocket.Chat suffers from an information disclosure vulnerability that stems from the actionLinkHandler method allowing message ID enumeration using a Regex MongoDB query. An attacker can exploit the vulnerability to obtain sensitive information...
CVE-2022-32218
An information disclosure vulnerability exists in Rocket.Chat v5, v4.8.2 and v4.7.5 due to the actionLinkHandler method was found to allow Message ID Enumeration with Regex MongoDB queries...
Information disclosure
An information disclosure vulnerability exists in Rocket.Chat v5, v4.8.2 and v4.7.5 due to the actionLinkHandler method was found to allow Message ID Enumeration with Regex MongoDB queries...
CVE-2022-32218
An information disclosure vulnerability exists in Rocket.Chat v5, v4.8.2 and v4.7.5 due to the actionLinkHandler method was found to allow Message ID Enumeration with Regex MongoDB queries...
CVE-2022-32218
CVE-2022-32218 – Rocket.Chat information disclosure : The vulnerability stems from actionLinkHandler/ actionLinks.getMessage not validating input, allowing authenticated users to enumerate Message IDs via a regex MongoDB query. Impact: potential exposure of sensitive information by enumerating ex...
Rocket.Chat 信息泄露漏洞
Rocket.Chat is an open source team chat software. Rocket.Chat suffers from an information disclosure vulnerability that stems from the actionLinkHandler method allowing message ID enumeration using a Regex MongoDB query. An attacker can exploit the vulnerability to obtain sensitive information...
CVE-2022-38792
creationtimestamp| type| source ---|---|--- 2022-08-28 00:31:38+00:00| seen| https://t.me/cibsecurity/48939...
CVE-2022-35144
creationtimestamp| type| source ---|---|--- 2022-08-05 00:19:50+00:00| seen| https://t.me/cibsecurity/47589...