CVE-2024-54492

CVE-2024-54492 concerns an issue where information sent over the network could be at risk due to lack of HTTPS in prior code paths. The vulnerability is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, and visionOS 2.2. Affected products include macOS and Apple mobile platfor...

CVE-2024-54492

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, visionOS 2.2. An attacker in a privileged network position may be able to alter network traffic...

ROS-20241211-13

Vulnerability of vrrpipsethandler function fglobalparser.c of network traffic balancing system Keepalived is related to integer overflow. Exploitation of the vulnerability could allow an attacker, acting remotely, to impact the confidentiality, integrity, and availability of protected information...

PT-2024-9328

Name of the Vulnerable Software and Affected Versions Windows Lightweight Directory Access Protocol LDAP versions prior to the fixed version Description The vulnerability is related to an integer overflow in the Windows Lightweight Directory Access Protocol LDAP service, allowing remote attackers...

Ivanti Sentry 安全漏洞

Ivanti Sentry is an in-line gateway from Ivanti USA, Inc. It is used to manage, encrypt and protect traffic between mobile devices and back-end enterprise systems. A security vulnerability exists in Ivanti Sentry that stems from insecure privilege management. An attacker could exploit the...

CVE-2024-55563

Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC Hashed Timelock Contract can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel...

The vulnerability of the Apache Traffic Server web server, related to insufficient validation of input data, allows attackers to cause service failures.

The vulnerability of the Apache Traffic Server web server is related to insufficient validation of input data when processing the Host header field. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Apache Traffic Server web server arises from improper checking of the return value of the privilege reset function, allowing attackers to increase their privileges.

The vulnerability of the Apache Traffic Server web server is related to improper checking of the return value of a privilege reset function. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the Cache Key Manipulation Plugin for the Apache Traffic Server allows a attacker to execute a cache poisoning attack.

The vulnerability of the Cache Key Manipulation Plugin for the Apache Traffic Server web server is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute a cache poisoning attack...

How Holiday Season Traditions Affect Internet Traffic Trends

...

Cisco NX-OS Uncontrolled Resource Consumption (CVE-2018-0090)

A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...

Cisco NX-OS Improper Input Validation (CVE-2014-0677)

The Label Distribution Protocol LDP functionality in Cisco NX-OS allows remote attackers to cause a denial of service temporary LDP session outage via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851. This plugin only works with Tenable.ot. Please visit...

WordPress Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) Plugin <= 1.2.1 is vulnerable to SQL Injection

Software Internal Linking for SEO traffic & Ranking – Auto internal links 100% automatic Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-11009 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID...

Security Advisory 0108

Security Advisory 0108 . CSAF PDF Date: December 5, 2024 Revision | Date | Changes ---|---|--- 1.0 | November 26, 2024 | Initial release 1.1 | December 5, 2024 | Update the affected and fixed EOS versions The CVE-ID tracking this issue: CVE-2024-6437 CVSSv3.1 Base Score: 5.8 CVSS:3.1/...

CVE-2024-52529

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For users with the following configuration: 1. An allow policy that selects a Layer 3 destination and a port range AND 2. A Layer 7 allow policy that selects a specific port within the first policy's range...

USN-7121-3 linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ATM...

Cilium 安全漏洞

Cilium is an open source software from Cilium Open Source. It is used to provide and transparently protect network connectivity and load balancing between application workloads such as application containers or processes. A security vulnerability exists in Cilium that stems from the fact that in...

Ubuntu: Security Advisory (USN-7120-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the FiveCo RAP traffic analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the FiveCo RAP traffic analyzer of Wireshark relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures by injecting specially crafted packets or capture files...

CVE-2024-6249

Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...