AXIS Camera Station Pro 安全漏洞

AXIS Camera Station Pro is a powerful and flexible video management and access control from Axis Sweden. A security vulnerability exists in AXIS Camera Station Pro versions prior to 6.4, which stems from an event reporting feature that may expose sensitive credentials on the client...

CVE-2024-45755

creationtimestamp| type| source ---|---|--- 2024-11-25 17:06:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113544683796812204...

CVE-2024-52814

Argo Helm is a collection of community maintained charts for argoproj.github.io projects. Prior to version 0.45.0, the workflow-role lacks granularity in its privileges, giving permissions to workflowtasksets and workflowartifactgctasks to all workflow Pods, when only certain types of Pods create...

CVE-2024-52814

CVE-2024-52814 — Helm (Argo) workflow-role privileges lack granularity : Affects Argo Helm prior to 0.45.0. The issue grants broad permissions in the workflow-role to all workflow Pods, not only those that require them, potentially impacting status reporting for certain Pods/Templates. Multiple s...

CVE-2018-9477

creationtimestamp| type| source ---|---|--- 2024-11-20 17:35:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113516486661985667 2024-11-20 19:36:29+00:00| seen| https://t.me/cvedetector/11649...

CVE-2024-11179

creationtimestamp| type| source ---|---|--- 2024-11-20 09:40:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113514621035570349 2024-11-20 09:44:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113514635516139263 2024-11-20 12:03:58+00:00| seen| https://t.me/cvedetector/115...

CVE-2024-51875

creationtimestamp| type| source ---|---|--- 2024-11-20 01:07:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113512603869406100...

CVE-2024-51824

creationtimestamp| type| source ---|---|--- 2024-11-19 22:07:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113511895246533097...

CVE-2024-52506 Graylog can leak other users' reports via concurrent PDF report rendering

Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included i...

Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty impacts IBM Common Licensing

Summary IBM WebSphere Application Server Liberty is vulnerable to information disclosure. CVE-2023-50314 Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofin...

Graylog 信息泄露漏洞

Graylog is a centralized log management solution from the American company Graylog. The product supports capturing, storing, and analyzing logs in real time, among other things. An information disclosure vulnerability exists in Graylog versions 6.1.0 and 6.1.1, which stems from the reporting...

PT-2024-35346 · Graylog · Graylog

Name of the Vulnerable Software and Affected Versions: Graylog versions 6.1.0 through 6.1.1 Description: The reporting functionality in Graylog is vulnerable to information leakage triggered by multiple concurrent report rendering requests from authorized users. When multiple report renderings ar...

CVE-2024-11118

creationtimestamp| type| source ---|---|--- 2024-11-16 03:55:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113490612225243245 2024-11-16 06:02:28+00:00| seen| https://t.me/cvedetector/11212...

s2n-tls has undefined behavior at process exit

Impact s2n-tls uses the Linux atexit function to register functions that clean up the global state when the process exits. In multi-threaded environments, the atexit handler may clean up state which is still in use by other threads. When this occurs, the exiting process may experience a...

The vulnerability of the Telerik Report Server software’s reporting control tool lies in its reliance on external controls for selecting classes. This allows an attacker to execute arbitrary code.

The vulnerability of the Telerik Report Server reporting control software lies in the use of external control for selecting classes when input data is provided. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Telerik Report Server software’s reporting control tool lies in its reliance on external controls for selecting classes. This allows an attacker to execute arbitrary code.

The vulnerability of the Telerik Report Server reporting management software lies in the use of external control for selecting classes when input data is provided. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2024-28049

creationtimestamp| type| source ---|---|--- 2024-11-13 20:54:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113477632553221791...

CVE-2024-51996

creationtimestamp| type| source ---|---|--- 2024-11-13 16:20:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113476554727172279 2024-11-13 18:54:23+00:00| seen| https://t.me/cvedetector/10850 2025-04-15 05:00:08+00:00| published-proof-of-concept|...

kernel: iommu/vt-d: Use device rbtree in iopf reporting path

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Use device rbtree in iopf reporting path The Linux kernel CVE team has assigned CVE-2024-35843 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051717-CVE-2024-35843-516e@gregkh/T...

Fortinet FortiManager和FortiAnalyzer 安全漏洞

Fortinet FortiManager and Fortinet FortiAnalyzer are both products of Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains AD...