2902 matches found
CVE-2024-12692 vulnerabilities
Vulnerabilities for packages: chromium...
Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java and IBM WebSphere Application Server Liberty
Summary There are multiple vulnerabilities in Java and IBM WebSphere Application Server Liberty used by IBM Cloud Transformation Advisor CVE-2024-7254, CVE-2022-46363, CVE-2015-2156, CVE-2020-11612. Vulnerability Details CVEID:CVE-2024-7254 DESCRIPTION: Any project that parses untrusted Protocol...
CISCO-SA-20180207-VPCDI
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:52+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794689674992...
BIT-NODE-MIN-2023-30590
The generateKeys API function returned from crypto.createDiffieHellman only generates missing or outdated keys, that is, it only generates a private key if none has been set yet, but the function is also needed to compute the corresponding public key after calling setPrivateKey. However, the...
Firmware Security: Identifying Risks to Implement Best Cybersecurity Practices
Find out the key security risks of firmware security: Identify threats, and learn best practices and protection methods…...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-50193)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50193 advisory. - In the Linux kernel, the following vulnerability has been resolved: x86/entry32: Clear CPU buffers after...
CVE-2024-12570 vulnerabilities
Vulnerabilities for packages: gitlab-cng-fips...
CVE-2024-45337 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, nuclei, dockerize, mongo-tools, spark-operator, descheduler, swagger, tfsec, tailscale, crossplane-provider-aws-s3, cert-manager-istio-csr, flux-kustomize-controller, sftpgo-plugin-eventsearch, tkn, kube-bench,...
PT-2024-36600 · Beego · Beego
Name of the Vulnerable Software and Affected Versions: beego versions prior to 2.3.4 Description: The issue concerns the use of MD5 as a hashing algorithm in beego, which is no longer considered secure due to its vulnerability to collision attacks. This vulnerability can lead to data integrity...
EulerOS 2.0 SP11 : kernel (EulerOS-SA-2024-2983)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : kernel:SUNRPC: fix a memleak in gssimportv2contextCVE-2023-52653 apparmor: Fix null pointer deref when receiving skb during sock...
Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to authenticate."...
GHSA-V778-237X-GJRC Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto
Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to authenticate."...
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2024-23454 DESCRIPTION: Apache Hadoop could allow a local authenticated attacker t...
Teaching an Old Framework New Tricks: The Dangers of Windows UI Automation
...
QNAP QTS Multiple Vulnerabilities (QSA-24-49)
QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...
Apple iOS < 18.2 Multiple Vulnerabilities (121837)
Binary data appleios182check.nbin...
CVE-2024-49142
CVE-2024-49142 is a Microsoft Access remote code execution vulnerability. Connected sources confirm a vulnerability in Microsoft Access that allows arbitrary code execution when a malicious file is opened or run, and Microsoft released a security update to address it (KB5002641 for Access 2016). ...
EUVD-2024-43760
Windows Lightweight Directory Access Protocol LDAP Denial of Service Vulnerability...
CVE-2024-49117
CVE-2024-49117 is a Windows Hyper-V remote/code execution vulnerability with a local attack vector and high impact (confidentiality, integrity, availability all High). The available connected documents indicate the issue is addressed by Microsoft updates, notably KB5048685 (OS builds 22621.4602/2...
