20202 matches found
CVE-2024-44176
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. Processing an image may lead to a denial-of-service...
CVE-2024-40841
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted video file may lead to unexpected app termination...
rexml: DoS vulnerability in REXML
A flaw was found in the REXML package. Reading an XML file that contains many entity expansions may lead to a denial of service due to resource starvation. An attacker can use this flaw to trick a user into processing an untrusted XML file...
rexml: DoS vulnerability in REXML
A flaw was found in the REXML package. Reading an XML file that contains many entity expansions may lead to a denial of service due to resource starvation. An attacker can use this flaw to trick a user into processing an untrusted XML file...
About the security content of visionOS2
About the security content of visionOS2 This document describes the security content of visionOS 2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of macOS Ventura 13.7
About the security content of macOS Ventura 13.7 This document describes the security content of macOS Ventura 13.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
PT-2024-31010 · Apple · Ipados +5
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7 iOS versions prior to 17.7 iPadOS versions prior to 17.7 visionOS versions prior to 2 watchOS versions prior to 11 macOS Sequoia versions prior to 15 iOS versions prior to 18 iPadOS versions prior to 18 macOS Sono...
The vulnerability of the Samba networking communication package arises from synchronization errors when using a shared resource. This allows attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the Samba networking communication package is related to synchronization errors when using a shared resource due to incorrect metadata processing. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...
The vulnerability of the Kerberos 5 authentication network protocol, related to the execution of operations outside of the buffer in memory, allows attackers to compromise the confidentiality and accessibility of protected information.
The vulnerability of the Kerberos authentication protocol lies in the fact that memory reading occurs during the processing of message tokens. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and accessibility of protected information...
The vulnerability of the LZ4 data compression algorithm, which involves errors in number processing, allows a hacker to cause a service failure.
The vulnerability of the lossless LZ4 data compression algorithm is related to errors in number processing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Security Bulletin: IBM Transformation Extender Advanced is affected by a vulnerability in its dependencies
Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is vulnerable in it's dependencies on Apache Commons FileUpload Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused b...
The vulnerability of the hashgen_main function (in the hashgen.cpp module) of the “Red Database” database management system allows a hacker to cause errors in the operation of the hashgen utility.
The vulnerability of the hashgenmain function in the hashgen.cpp module of the “Red Database” database management system is related to incorrect processing of input parameters from the hashgen utility. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the hashgen...
DEBIAN-CVE-2024-45015
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: move dpuencoder's connector assignment to atomicenable For cases where the crtc's connectorschanged was set without enable/active getting toggled , there is an atomicenable call followed by an atomicdisable but witho...
s390/cio: fix race condition during online processing
...
net: ethernet: mtk_eth_soc: fix PPE hanging issue
...
EulerOS 2.0 SP12 : python-idna (EulerOS-SA-2024-2355)
According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.423)
The version of AHV installed on the remote host is prior to 20220304.423. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.423 advisory. - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via...
CVE-2024-8567
A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletedeductions. The manipulation of the argument id leads to sql injection. The attack may be initiated...
CVE-2024-8559
A vulnerability, which was classified as critical, has been found in SourceCodester Online Food Menu 1.0. This issue affects some unknown processing of the file /endpoint/delete-menu.php. The manipulation of the argument menu leads to sql injection. The attack may be initiated remotely. The explo...
CVE-2024-44082
In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data...