AZL-37119 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2024-25614

creationtimestamp| type| source ---|---|--- 2024-03-05 22:26:21+00:00| seen| https://t.me/ctinow/200757 2024-03-05 22:32:12+00:00| seen| https://t.me/ctinow/200767...

CVE-2024-25613

creationtimestamp| type| source ---|---|--- 2024-03-05 22:26:20+00:00| seen| https://t.me/ctinow/200756 2024-03-05 22:32:11+00:00| seen| https://t.me/ctinow/200766...

CVE-2024-25611

creationtimestamp| type| source ---|---|--- 2024-03-05 22:26:18+00:00| seen| https://t.me/ctinow/200754 2024-03-05 22:32:09+00:00| seen| https://t.me/ctinow/200764...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

CVE-2024-27627

creationtimestamp| type| source ---|---|--- 2024-03-05 15:26:47+00:00| seen| https://t.me/ctinow/200338 2024-03-05 15:26:51+00:00| seen| https://t.me/ctinow/200342...

CVE-2023-45593

creationtimestamp| type| source ---|---|--- 2024-03-05 13:28:13+00:00| seen| https://t.me/ctinow/200214 2024-03-05 13:28:32+00:00| seen| https://t.me/ctinow/200228...

Pegasus spyware creator ordered to reveal code used to spy on WhatsApp users

A California federal judge has ordered spyware maker NSO Group to hand over the code for Pegasus and other spyware products that were used to spy on WhatsApp users. Meta-owned WhatsApp has been fighting NSO in court since 2019, after Pegasus was allegedly used against 1,400 WhatsApp users over th...

CVE-2024-26334

creationtimestamp| type| source ---|---|--- 2024-03-05 10:27:26+00:00| seen| https://t.me/ctinow/200074 2024-03-05 10:27:30+00:00| seen| https://t.me/ctinow/200078...

CVE-2024-20837

creationtimestamp| type| source ---|---|--- 2024-03-05 06:22:25+00:00| seen| https://t.me/ctinow/199933 2024-03-05 06:27:12+00:00| seen| https://t.me/ctinow/199946...

CVE-2023-6068

creationtimestamp| type| source ---|---|--- 2024-03-04 21:26:15+00:00| seen| https://t.me/ctinow/199608 2024-03-04 21:26:19+00:00| seen| https://t.me/ctinow/199612...

CVE-2021-47089

creationtimestamp| type| source ---|---|--- 2024-03-04 19:31:43+00:00| seen| https://t.me/ctinow/199503 2024-03-05 18:22:14+00:00| seen| https://t.me/ctinow/200537...

CVE-2021-47095

creationtimestamp| type| source ---|---|--- 2024-03-04 19:26:36+00:00| seen| https://t.me/ctinow/199491 2024-03-04 19:31:49+00:00| seen| https://t.me/ctinow/199509 2024-03-05 18:22:08+00:00| seen| https://t.me/ctinow/200531...

CVE-2023-52577

An out-of-bounds access flaw was found in dccpv4err and dccpv6err in the Linux kernel. This may lead to a crash...

CVE-2024-27694

creationtimestamp| type| source ---|---|--- 2024-03-04 17:27:11+00:00| seen| https://t.me/ctinow/199395 2024-03-04 17:27:17+00:00| seen| https://t.me/ctinow/199401...

CVE-2024-22463

creationtimestamp| type| source ---|---|--- 2024-03-04 15:27:09+00:00| seen| https://t.me/ctinow/199310 2024-03-04 15:27:22+00:00| seen| https://t.me/ctinow/199321...

CVE-2024-0155

creationtimestamp| type| source ---|---|--- 2024-03-04 14:31:53+00:00| seen| https://t.me/ctinow/199279 2024-03-04 14:31:58+00:00| seen| https://t.me/ctinow/199284...

CVE-2024-24901

Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, causing audit messages lost and not recorded for a specific time period...

Design/Logic Flaw

Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, causing audit messages lost and not recorded for a specific time period...

CVE-2024-24901

Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, causing audit messages lost and not recorded for a specific time period...