24920 matches found
BIT-HYPERLEDGER-FABRIC-TOOLS-2022-31121 Improper Input Validation in fabric hyperledger
Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus request to an orderer it may crash the orderer node. A fix has been added in commit 0f1835949 which checks for missing consensus messages and returns an error ...
Important: Red Hat Security Advisory: libndp security update
An update for libndp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2024-40898
creationtimestamp| type| source ---|---|--- 2024-07-18 10:13:30+00:00| seen| https://t.me/HackingInsights/6516 2024-07-18 13:27:11+00:00| seen| https://t.me/cvedetector/1148 2024-07-19 03:58:31+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8023 2024-07-20 15:31:46+00:00|...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
SUSE CVE-2024-31143
An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different situations, with or witho...
CVE-2022-35640
IBM Sterling Partner Engagement Manager 6.2.2 could allow a local attacker to obtain sensitive information when a detailed technical error message is returned. IBM X-Force ID: 230933...
CVE-2024-39700
creationtimestamp| type| source ---|---|--- 2024-07-16 21:18:17+00:00| seen| https://t.me/cvedetector/989 2024-07-25 09:37:51+00:00| seen| https://t.me/HackingInsights/7313 2024-07-31 05:00:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8133 2026-09-02 01:00:04+00:00|...
CVE-2024-40919
In the Linux kernel, the following vulnerability has been resolved: bnxten: Adjust logging of firmware messages in case of released token in hwrmsend In case of token is released due to token-state == BNXTHWRMDEFERRED, released token set to NULL is used in log messages. This issue is expected to ...
CVE-2024-6457
creationtimestamp| type| source ---|---|--- 2024-07-16 13:45:51+00:00| seen| https://t.me/cvedetector/929 2024-07-18 10:13:01+00:00| seen| https://t.me/HackingInsights/6470...
EulerOS 2.0 SP9 : sudo (EulerOS-SA-2024-1973)
According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Sudo before 1.9.13 does not escape control characters in log messages.CVE-2023-28486 Sudo before 1.9.13 does not escape control characters in...
EulerOS 2.0 SP9 : sudo (EulerOS-SA-2024-1946)
According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Sudo before 1.9.13 does not escape control characters in log messages.CVE-2023-28486 Sudo before 1.9.13 does not escape control characters in...
IBM Sterling Partner Engagement Manager security vulnerabilities
IBM Sterling Partner Engagement Manager is an automated management tool from International Business Machines IBM. An information disclosure vulnerability exists in IBM Sterling Partner Engagement Manager version 6.2.2, which can be exploited by a local attacker to gain access to sensitive...
Hackers Claim to Have Leaked 1.1 TB of Disney Slack Messages
A hacker group called “NullBulge” says it stole more than a terabyte of Disney’s internal Slack messages and files from nearly 10,000 channels in an apparent protest over AI-generated art...
CVE-2024-38491
creationtimestamp| type| source ---|---|--- 2024-07-15 16:50:50+00:00| seen| https://t.me/cvedetector/869...
IBM Datacap Navigator security vulnerabilities
IBM Datacap Navigator is a Web client for Datacap from International Business Machines IBM. An information disclosure vulnerability exists in IBM Datacap Navigator, which can be exploited by an attacker to obtain sensitive information when a detailed technical error message is returned in a brows...
PT-2024-5141 · Ibm · Ibm Sterling Partner Engagement Manager
Name of the Vulnerable Software and Affected Versions: IBM Sterling Partner Engagement Manager version 6.2.2 Description: The issue is related to the mechanism of forming error reports in IBM Sterling Partner Engagement Manager, which could allow a local attacker to obtain sensitive information...
Splunk Web Bulletin Messages XSS
The vulnerability of the Bulletin Messages module in the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting...
CVE-2023-39327
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal...
AZL-73323 CVE-2023-39327 affecting package openjpeg2 2.3.1-12
A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal...