Lucene search
+L

5503 matches found

OSV
OSV
•added 2024/10/24 12:00 a.m.•20 views

CVE-2024-41618

Money Manager EX WebApp web-money-manager-ex 1.2.2 is vulnerable to SQL Injection in the transactiondeletegroup function. The vulnerability is due to improper sanitization of user input in the TrDeleteArr parameter, which is directly incorporated into an SQL query...

9.8CVSS7.9AI score
SaveExploits0References6
NVD
NVD
•added 2024/10/23 11:15 a.m.•38 views

CVE-2023-50310

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval...

7.5CVSS0.00396EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/23 10:55 a.m.•42 views

CVE-2023-50310 IBM CICS Transaction Gateway for Multiplatforms information disclosure

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval...

4.9CVSS0.00396EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/23 10:55 a.m.•18 views

CVE-2023-50310 IBM CICS Transaction Gateway for Multiplatforms information disclosure

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval...

4.9CVSS6.9AI score0.00396EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/23 12:00 a.m.•20 views

IBM CICS Transaction Gateway 安全漏洞

IBM CICS Transaction Gateway is a connector for modernizing enterprise CICS assets from International Business Machines IBM. A security vulnerability exists in IBM CICS Transaction Gateway for Multiplatforms that stems from not using a secure method of transmitting or storing authentication...

7.5CVSS6.8AI score0.00396EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•7 views

CVE-2023-50310: Insufficiently Protected Credentials

IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval...

7.5CVSS5.8AI score0.00396EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•22 views

PT-2024-13897 · Ibm · Ibm Cics Transaction Gateway For Multiplatforms

Name of the Vulnerable Software and Affected Versions: IBM CICS Transaction Gateway for Multiplatforms versions 9.2 through 9.3 Description: The issue concerns the transmission and storage of authentication credentials by the software, which uses an insecure method. This makes the credentials...

7.5CVSS7.1AI score0.00396EPSS
SaveExploits0References7
OSV
OSV
•added 2024/10/21 6:15 p.m.•5 views

DEBIAN-CVE-2024-49868

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported a NULL pointer dereference with the following crash: FAULTINJECTION: forcing a failure. starttransaction+0x830/0x1670...

5.5CVSS6AI score0.00288EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/21 6:15 p.m.•10 views

AZL-51405 CVE-2024-49868 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported a NULL pointer dereference with the following crash: FAULTINJECTION: forcing a failure. starttransaction+0x830/0x1670...

5.5CVSS6AI score0.00288EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/21 6:15 p.m.•16 views

UBUNTU-CVE-2024-49868

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported a NULL pointer dereference with the following crash: FAULTINJECTION: forcing a failure. starttransaction+0x830/0x1670...

5.5CVSS5.9AI score0.00288EPSS
SaveExploits0References43
Cvelist
Cvelist
•added 2024/10/21 6:01 p.m.•46 views

CVE-2024-49868 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported a NULL pointer dereference with the following crash: FAULTINJECTION: forcing a failure. starttransaction+0x830/0x1670...

0.00288EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/10/21 6:01 p.m.•20 views

CVE-2024-49868 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported a NULL pointer dereference with the following crash: FAULTINJECTION: forcing a failure. starttransaction+0x830/0x1670...

6AI score0.00288EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/10/21 12:00 a.m.•10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference caused by the btrfs file system when a transaction fails to start...

5.5CVSS6.5AI score0.00288EPSS
SaveExploits0References9
Veracode
Veracode
•added 2024/10/18 5:50 a.m.•18 views

Transaction Replay Attack

github.com/cosmos/ethermint is vulnerable to Transaction Replay Attack. The vulnerability is due to a flaw in the EVM module where, if the victim sends a very large nonce transaction, the attacker can replay the transaction through the application...

7.5CVSS6.5AI score0.01147EPSS
SaveExploits0References4Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/16 2:51 p.m.•9 views

Malicious code in solana-transaction (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/10/15 6:38 p.m.•20 views

GO-2024-3189 Consensus failure in github.com/btcsuite/btcd

The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's 'FindAndDelete' functionality, causing discrepancies in the validation of Bitcoin blocks. This can lead to a chain split accepting an invalid block or Denial of Service DoS attacks rejecting a valid block...

8.1CVSS7.2AI score0.01007EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
•added 2024/10/14 7:00 a.m.•19 views

drm/amd/display: Check msg_id before processing transcation

...

7.8CVSS6.8AI score0.00248EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2024/10/11 11:22 a.m.•44 views

Security Bulletin: There are multiple vulnerabilities that affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary There are multiple vulnerabilities that affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition. Updates for CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition have been released to address these vulnerabilities...

7.4CVSS7.2AI score0.01257EPSS
SaveExploits0Affected Software2
Positive Technologies
Positive Technologies
•added 2024/10/10 12:00 a.m.•20 views

PT-2024-26865 · Btcd · Btcd

Name of the Vulnerable Software and Affected Versions: btcd versions prior to 0.24.2 Description: The issue concerns a consensus rule discrepancy in the signature verification process. Specifically, the removeOpcodeByData function mishandles legacy signature verification rules, potentially leadin...

7.4CVSS6.6AI score0.01007EPSS
SaveExploits0References14
IBM Security Bulletins
IBM Security Bulletins
•added 2024/10/08 8:15 p.m.•34 views

Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime affect z/Transaction Processing Facility

Summary There are multiple vulnerabilities in IBM® Semeru Runtime Certified Edition 11 that is used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-21012 DESCRIPTION: An unspecified vulnerability in Java SE related to the Networking component cou...

3.7CVSS6.5AI score0.01056EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder