Shopware 安全漏洞

Shopware is a suite of open source e-commerce software from the German company Shopware. A security vulnerability exists in Shopware versions prior to 6.6.10.3 and prior to 6.5.8.17, which stems from a default setting that allows unconfirmed bulk news subscriptions...

CVE-2024-11284

The WP JobHunt plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.9. This is due to the plugin not properly validating a user's identity prior to updating their password through the accountsettingssavecallback function. This mak...

CVE-2024-20495

A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition on an...

CVE-2024-52914

In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction...

CVE-2024-52913

In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled...

CVE-2024-52913

In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled...

CVE-2024-52914: Allocation of Resources Without Limits or Throttling

In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction...

CVE-2024-52914

Bitcoin Core versions prior to 0.18.0 are vulnerable to a denial of service (DoS) condition. A node can be stalled for hours when processing the orphans of a specially crafted unconfirmed transaction . The root cause is related to the allocation of resources without limits or throttling (CWE-770)...

PT-2024-35482

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 0.18.0 Description: A node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction. This issue affects Bitcoin Core and can lead to a denial of service. Recommendations: For...

CVE-2024-52914

In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction...

CVE-2024-52914

In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction...

CVE-2024-52914

In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction...

CVE-2024-52913

In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled...

Bitcoin Core 安全漏洞

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in Bitcoin Core versions prior to 0.21.0. An attacker exploiting the vulnerability could prevent nodes from viewing specific unconfirmed transactions...

CVE-2024-52913

In Bitcoin Core versions prior to 0.21.0 , a vulnerability exists where an attacker can prevent a node from seeing a specific unconfirmed transaction. This is caused by the mishandling of transaction re-requests , which can lead to the omission of specific transactions from the node's view. A pro...

Bitcoin Core 安全漏洞

Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in versions of Bitcoin Core prior to 0.18.0, which stems from the fact that nodes may stall for several hours while processing isolated blocks of specially crafted...

PT-2024-35481

Name of the Vulnerable Software and Affected Versions: Bitcoin Core versions prior to 0.21.0 Description: The issue allows an attacker to prevent a node from seeing a specific unconfirmed transaction due to mishandled transaction re-requests. Recommendations: For versions prior to 0.21.0, update ...

CVE-2024-52913

In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled...

CVE-2024-27415

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

go-git:fuzz_parser: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4650681523830784 Project: go-git Fuzzing Engine: libFuzzer Fuzz Target: fuzzparser Job Type: libfuzzerasango-git Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...