Lucene search
+L

20249 matches found

BDU FSTEC
BDU FSTEC
added 2024/12/16 12:0 a.m.10 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in errors in processing the relative path to the catalog, allowing an attacker to disclose protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow an attacker to disclose protected information...

6.8CVSS5.4AI score0.03294EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/16 12:0 a.m.16 views

PT-2025-1926

Name of the Vulnerable Software and Affected Versions Color imageCLASS MF656Cdw versions v05.04 and earlier Color imageCLASS MF654Cdw versions v05.04 and earlier Color imageCLASS MF653Cdw versions v05.04 and earlier Color imageCLASS MF652Cdw versions v05.04 and earlier Color imageCLASS LBP633Cdw...

10CVSS10AI score0.01202EPSS
SaveExploits0References19
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:0 a.m.13 views

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Remote Desktop Services RDS for Windows operating systems lies in the use of insecure mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.1CVSS8.2AI score0.01088EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/12/13 12:0 a.m.21 views

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50154)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50154 advisory. - In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timerpending in...

9.8CVSS6.1AI score0.00555EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/12/13 12:0 a.m.17 views

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49866)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49866 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Fix a race during cpuh...

7.8CVSS5.8AI score0.00181EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.8 views

PT-2025-3335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between reference pointers in the Linux kernel's ethernet oa tc6 module. This issue arises from the management of two skb pointers: waiting tx skb and ongoing tx...

4.7CVSS6.6AI score0.00241EPSS
SaveExploits0References23
Microsoft CVE
Microsoft CVE
added 2024/12/12 8:0 a.m.10 views

irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

...

4.7CVSS6.7AI score0.00205EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2024/12/12 8:0 a.m.7 views

bpf: devmap: provide rxq after redirect

...

9.8CVSS6.8AI score0.00517EPSS
SaveExploits0
OSV
OSV
added 2024/12/12 2:15 a.m.13 views

CVE-2024-54502

The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash...

6.5CVSS6AI score
SaveExploits0References12
OSV
OSV
added 2024/12/12 2:3 a.m.14 views

AZL-62402 CVE-2024-47834 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GSTMATROSKAIDCODECPRIVATE case within the gstmatroskademuxparsestream function, a dat...

9.1CVSS6.5AI score0.00911EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/12/12 12:0 a.m.20 views

EulerOS 2.0 SP12 : syslinux (EulerOS-SA-2024-2958)

According to the versions of the syslinux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56,...

9.8CVSS8.3AI score0.10339EPSS
SaveExploits4References14
Vulnrichment
Vulnrichment
added 2024/12/11 10:57 p.m.13 views

CVE-2024-54500

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. Processing a maliciously crafted image may result in disclosure of process memory...

5.6AI score0.00315EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2024/12/11 10:56 p.m.10 views

CVE-2024-54486

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. Processing a maliciously crafted font may result in the disclosure of process memory...

5.6AI score0.0139EPSS
SaveExploits0References8
CVE
CVE
added 2024/12/11 10:56 p.m.79 views

CVE-2024-54486

CVE-2024-54486 involves memory disclosure triggered by processing a maliciously crafted font in Apple platforms. Connected sources confirm the issue affects Apple operating systems and fonts handling, with remediation in updates: iPadOS 17.7.3, iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, Ventura 1...

6.5CVSS6.7AI score0.0139EPSS
SaveExploits0References13Affected Software6
RedHat Linux
RedHat Linux
added 2024/12/11 4:21 p.m.14 views

kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE Kunkun Jiang reported that there is a small window of opportunity for userspace to force a change of affinity for a VPE while the VPE has already been unmapped, but the...

4.7CVSS6.8AI score0.00205EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/12/11 12:0 a.m.9 views

PT-2024-36371

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.2 visionOS versions prior to 2.2 tvOS versions prior to 18.2 macOS Sequoia versions prior to 15.2 Safari versions prior to 18.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue was...

7.8CVSS6.9AI score0.22728EPSS
SaveExploits2References91
BDU FSTEC
BDU FSTEC
added 2024/12/11 12:0 a.m.9 views

The vulnerability of the microprogramming software for Schneider Electric’s programmable logic controllers (PLC) models M241, M251, M258, and LMC058 is related to errors in processing input data. This vulnerability allows attackers to trigger maintenance failures and compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the microprogrammed software of Schneider Electric’s programmable logic controllers PLC models M241, M251, M258, and LMC058 is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to trigger maintenance failures and compromise the...

10CVSS5.5AI score0.00641EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/10 12:0 a.m.21 views

The vulnerability of MediaTek’s microprogramming software relates to the execution of operations outside of the buffer in memory, allowing attackers to exploit their privileges.

The vulnerability of MediaTek’s microprogramming software lies in the fact that operations are performed outside the buffer in memory when processing DA files. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.4CVSS5.7AI score0.00089EPSS
SaveExploits0References3Affected Software4
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.5 views

Splunk Enterprise和Splunk Cloud Platform 安全漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. A security vulnerability exists in Splunk Clou...

7.5CVSS6.7AI score0.00282EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2024/12/09 8:41 p.m.28 views

`idna` accepts Punycode labels that do not produce any non-ASCII when decoded

idna 0.5.0 and earlier accepts Punycode labels that do not produce any non-ASCII output, which means that either ASCII labels or the empty root label can be masked such that they appear unequal without IDNA processing or when processed with a different implementation and equal when processed with...

8.8CVSS4.2AI score0.00201EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder