12872 matches found
PowerJob 安全漏洞
PowerJob is an open source distributed computing and job scheduling framework from PowerJob Open Source that allows developers to easily schedule tasks in their applications. A security vulnerability exists in PowerJob version 3.20 and later, which stems from vulnerability to SQL injection attack...
PT-2024-31171 · Powerjob · Powerjob
Name of the Vulnerable Software and Affected Versions: Powerjob versions 3.20 and later Description: The issue allows for SQL injection via the version parameter. Recommendations: For Powerjob versions 3.20 and later, at the moment, there is no information about a newer version that contains a fi...
USN-7099-1 openjdk-21 vulnerabilities
Andy Boothe discovered that the Networking component of OpenJDK 21 did not properly handle access under certain circumstances. An unauthenticated attacker could possibly use this issue to cause a denial of service. CVE-2024-21208 It was discovered that the Hotspot component of OpenJDK 21 did not...
PT-2024-12891 · Extreme Networks · Extremexos
Name of the Vulnerable Software and Affected Versions: Extreme Networks ExtremeXOS aka EXOS version 30.7.1.1 Description: The issue is related to the BGP daemon in Extreme Networks ExtremeXOS, which allows an attacker to cause a denial of service BGP session reset due to BGP attribute error...
CVE-2024-50228
creationtimestamp| type| source ---|---|--- 2024-11-09 11:19:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113452723340208118...
CVE-2024-50223
In the Linux kernel, the following vulnerability has been resolved: sched/numa: Fix the potential null pointer dereference in tasknumawork When running stress-ng-vm-segv test, we found a null pointer dereference error in tasknumawork. Here is the backtrace: 323676.066985 Unable to handle kernel...
CVE-2024-50222
creationtimestamp| type| source ---|---|--- 2024-11-09 10:49:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113452605242058677...
CVE-2024-10801
creationtimestamp| type| source ---|---|--- 2024-11-09 07:36:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113451845325780689 2024-11-09 09:56:30+00:00| seen| https://t.me/cvedetector/10283...
CVE-2024-44765
creationtimestamp| type| source ---|---|--- 2024-11-08 18:57:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113448863167706803 2024-11-08 21:23:30+00:00| seen| https://t.me/cvedetector/10220 2024-12-17 16:36:25+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9468...
CVE-2024-50210
In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in pcclocksettime If getclockdesc succeeds, it calls fget for the clockid's fd, and get the clk-rwsem read lock, so the error path should release the lock to make the lock balance...
CVE-2024-50183
creationtimestamp| type| source ---|---|--- 2024-11-08 05:44:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113445742200266929 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...
CVE-2024-49524
Adobe Experience Manager versions 6.5.20 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...
CVE-2024-48290
creationtimestamp| type| source ---|---|--- 2024-11-07 17:26:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113442840205850132 2024-11-07 20:16:56+00:00| seen| https://t.me/cvedetector/10111...
Adobe Experience Manager 跨站脚本漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
CVE-2024-34682
creationtimestamp| type| source ---|---|--- 2024-11-06 03:02:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113433783217730295 2024-11-06 04:57:43+00:00| seen| https://t.me/cvedetector/9979...
PT-2024-16015
Name of the Vulnerable Software and Affected Versions CodeChecker versions through 6.24.1 Description Authentication bypass occurs when the API URL ends with Authentication, allowing superuser access to all API endpoints other than /Authentication. These endpoints include the ability to add, edit...
CVE-2024-47461
creationtimestamp| type| source ---|---|--- 2024-11-05 22:57:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113432818029718949 2024-11-06 00:46:39+00:00| seen| https://t.me/cvedetector/9961 2024-11-06 16:21:22+00:00| seen|...
PT-2024-9220 · Mediatek +1 · Mediatek Microchips +1
Name of the Vulnerable Software and Affected Versions: MediaTek microchip software affected versions not specified Android versions 12.0 through 15.0 openWRT versions 19.07 through 23.05 Yocto version 4.0 RDK-B versions 22Q3 through 24Q1 Description: The issue is related to an out-of-bounds write...
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-15040024116 fixes several issues. The following security issues were fixed: CVE-2024-35905: Fixed int overflow for stack access size bsc1226327. CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. CVE-2024-35863: Fixed potential UAF ...