CVE-2024-47535

creationtimestamp| type| source ---|---|--- 2024-11-12 14:03:40+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv 2024-11-12 18:03:31+00:00| seen| https://t.me/cvedetector/10654 2025-01-29 14:55:05+00:00| seen|...

CVE-2024-29119

creationtimestamp| type| source ---|---|--- 2024-11-12 13:03:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113470118669785508 2024-11-12 13:06:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113470132345425419 2024-11-14 12:00:00+00:00| seen|...

OpenSSL is vulnerable to a denial of service, caused by a flaw in the handling of RSA public keys by the EVP_PKEY_public_check() function

OpenSSL is vulnerable to a denial-of-service DoS issue due to how there is no restriction on RSA public key size, or the subsequent time spent processing such keys. Applications that use the EVPPKEYpubliccheck function to check RSA public keys obtained from potentially untrusted sources can be...

CVE-2024-11078

creationtimestamp| type| source ---|---|--- 2024-11-11 21:57:57+00:00| seen| https://t.me/cvedetector/10539 2025-02-14 10:09:25+00:00| seen| Telegram/Bn90B4-VMWnvXe3q5RLTpL063Pd869qxU5a5WQjwHvn25M7- 2025-02-14 21:08:29+00:00| seen| Telegram/Wizz02jPQXFmt7n1d2A5K9qhaEHuCU8TLY7xU3Xh03A-qSx...

CVE-2024-11067

creationtimestamp| type| source ---|---|--- 2024-11-11 08:12:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113463310423022630 2024-11-11 10:15:02+00:00| seen| https://t.me/cvedetector/10482 2024-11-13 16:42:10+00:00| seen| https://mstdn.ca/users/rfwaveio/statuses/113476640532735205...

PT-2024-34653 · Ampache · Ampache

Name of the Vulnerable Software and Affected Versions: Ampache versions prior to 7.0.1 Description: The current implementation of token parsing in Ampache does not adequately validate CSRF tokens when users send messages to one another. This issue could be exploited to forge CSRF attacks, allowin...

CVE-2024-10674

creationtimestamp| type| source ---|---|--- 2024-11-09 03:20:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113450840932108032 2024-11-09 05:45:41+00:00| seen| https://t.me/cvedetector/10268 2025-03-13 04:00:06+00:00| published-proof-of-concept|...

CVE-2024-46948

creationtimestamp| type| source ---|---|--- 2024-11-08 15:50:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113448127656485474 2024-11-08 15:53:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113448139555020818 2024-11-08 18:02:41+00:00| seen| https://t.me/cvedetector/102...

SUSE CVE-2024-51990

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause jj to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from...

CVE-2024-11053

creationtimestamp| type| source ---|---|--- 2024-11-08 01:10:47+00:00| seen| https://hackerone.com/reports/2829063 2024-12-11 06:14:16+00:00| seen| https://daniel.haxx.se/blog/2024/12/11/curl-8-11-1/ 2024-12-11 07:12:25+00:00| seen|...

CVE-2024-8424

creationtimestamp| type| source ---|---|--- 2024-11-07 23:29:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113444270592881030 2024-11-08 02:08:16+00:00| seen| https://t.me/cvedetector/10149 2024-11-11 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1471/...

CVE-2024-21455

creationtimestamp| type| source ---|---|--- 2024-11-07 17:04:54+00:00| seen| https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429 2024-12-16 05:11:23+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html 2024-12-...

CVE-2024-40715

creationtimestamp| type| source ---|---|--- 2024-11-07 16:48:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113442691028215303 2024-11-07 18:36:28+00:00| seen| https://t.me/cvedetector/10098 2024-11-08 14:04:26+00:00| seen|...

GHSA-88H5-6W7M-5W56 jj vulnerable to path traversal via crafted Git repositories

Impact Specially crafted Git repositories can cause jj to write files outside the clone. Patches Fixed in 0.23.0. Workarounds Not much other than to not clone repositories from untrusted sources. References Here's the original report from @joernchen: When cloning a crafted Git repository it is...

CVE-2024-10668

creationtimestamp| type| source ---|---|--- 2024-11-07 15:29:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113442382992604234 2024-11-07 17:46:20+00:00| seen| https://t.me/cvedetector/10097 2025-04-03 06:21:00+00:00| seen|...

CVE-2024-39605

creationtimestamp| type| source ---|---|--- 2024-11-07 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-312-02 2024-11-08 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1465/ 2024-11-08 06:00:00+00:00| seen|...

CVE-2024-50144

creationtimestamp| type| source ---|---|--- 2024-11-07 09:52:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113441055293181302 2024-11-07 10:11:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113441129322849823...

CVE-2024-51990 Path traversal via crafted Git repositories in jj

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause jj to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from...

CVE-2024-51990 Path traversal via crafted Git repositories in jj

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause jj to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from...

CVE-2024-51990 Path traversal via crafted Git repositories in jj

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause jj to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from...