CVE-2024-53212 netlink: fix false positive warning in extack during dumps

In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...

CVE-2024-53212 netlink: fix false positive warning in extack during dumps

In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...

scsidebug Component DoS

The vulnerability of the scsidebug component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the functions respverify and respreportzones. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

UBUNTU-CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

CVE-2024-35219

creationtimestamp| type| source ---|---|--- 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-24 2025-01-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-02 2025-01-13 00:00:00+00:00| seen| The Shadowserver...

Malicious code in ui-forms-embed-components-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...

MAL-2024-12094 Malicious code in ui-forms-embed-components-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...

CVE-2024-37758

creationtimestamp| type| source ---|---|--- 2024-12-20 19:01:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113686693262617989 2024-12-20 19:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr3wooi472x 2024-12-20 20:55:57+00:00| seen|...

CVE-2024-56331

creationtimestamp| type| source ---|---|--- 2024-12-20 14:23:08+00:00| published-proof-of-concept| https://github.com/louislam/uptime-kuma/security/advisories/GHSA-2qgm-m29m-cj2h 2024-12-20 19:55:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113686907294716814 2024-12-20...

CVE-2024-56350

creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576592470411 2024-12-20 15:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoj5gvjm2m 2024-12-20 16:44:59+00:00| seen|...

CVE-2024-11812

creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptp7kv4e2s 2024-12-20 07:35:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113683998106038612 2024-12-20 09:13:16+00:00| seen|...

CVE-2024-8968

creationtimestamp| type| source ---|---|--- 2024-12-20 06:01:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683628372130551 2024-12-20 06:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpqdzi7dc2s 2024-12-20 08:22:59+00:00| seen|...

CVE-2024-12727

A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 21.0.1 allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange SPX is enabled in combination with the...

CVE-2024-12728

creationtimestamp| type| source ---|---|--- 2024-12-19 20:52:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113681467208621916 2024-12-19 21:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos634iqp2s 2024-12-19 23:11:06+00:00| seen|...

CVE-2024-55505

creationtimestamp| type| source ---|---|--- 2024-12-18 22:08:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113676105416709418 2024-12-18 23:44:20+00:00| seen| https://t.me/cvedetector/13257 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...

CVE-2024-56059

creationtimestamp| type| source ---|---|--- 2024-12-18 12:33:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113673843515493237 2024-12-18 13:41:33+00:00| seen| https://t.me/cvedetector/13181 2025-01-14 12:49:39+00:00| seen|...

Exploit for CVE-2024-55968

CVE-2024-55968 LPE Exploit POC for CVE-2024-55968 Vulnerab...

Hitachi Energy TropOS Devices Series 1400/2400/6400

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for...

Rockwell Automation PowerMonitor 1000 Remote

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to perform edit operations, create admin users, perform factory reset, execute arbitrary code, or cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures...