Lucene search
+L

3119 matches found

NVD
NVD
•added 2024/11/15 5:15 p.m.•42 views

CVE-2024-52521

Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chances of a background job with arguments falsely being identified as already existing and not be queued for execution. By changing the Hash to SHA256 t...

5.3CVSS0.0042EPSS
SaveExploits0References3
Mend
Mend
•added 2024/11/15 4:38 p.m.•13 views

CVE-2024-52521

Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chances of a background job with arguments falsely being identified as already existing and not be queued for execution. By changing the Hash to SHA256 t...

5.3CVSS0.0042EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/11/15 4:38 p.m.•44 views

CVE-2024-52521 Nextcloud Server has a potential hash collision for background jobs could skip queuing them

Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chances of a background job with arguments falsely being identified as already existing and not be queued for execution. By changing the Hash to SHA256 t...

2.6CVSS7.3AI score0.0042EPSS
SaveExploits0References3
Nextcloud
Nextcloud
•added 2024/11/15 1:08 p.m.•84 views

Potential hash collision for background jobs could skip queuing them

None...

5.3CVSS5.1AI score0.0042EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•22 views

NextCloud security vulnerabilities

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud has a security vulnerability that stems from an MD5 hash being used to check the uniqueness of background jobs. This increases the likelihood tha...

5.3CVSS6.6AI score0.0042EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•6 views

CVE-2024-52521: Use of Weak Hash

Nextcloud Server is a self hosted personal cloud system. MD5 hashes were used to check background jobs for their uniqueness. This increased the chances of a background job with arguments falsely being identified as already existing and not be queued for execution. By changing the Hash to SHA256 t...

5.3CVSS5.6AI score0.0042EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/11/12 9:11 a.m.•25 views

kernel: ext4: avoid online resizing failures due to oversized flex bg

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg When we online resize an ext4 filesystem with a oversized flexbgsize, mkfs.ext4 -F -G 67108864 $dev -b 4096 100M mount $dev $dir resize2fs $dev 16G the following WARNO...

5.5CVSS6.7AI score0.00243EPSS
SaveExploits0References5
CNVD
CNVD
•added 2024/11/07 12:00 a.m.•24 views

Huawei HarmonyOS Type Check Not Strict Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a type-checking laxity vulnerability, which stems from a type-checking laxity in the background task service module. An attacke...

5.7CVSS6.7AI score0.00106EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/05 10:21 a.m.•21 views

CVE-2024-51521

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS5.8AI score0.00106EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/05 10:21 a.m.•55 views

CVE-2024-51521

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

5.7CVSS0.00106EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/05 9:12 a.m.•19 views

CVE-2024-51521

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

5.7CVSS6.9AI score0.00106EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/05 9:12 a.m.•59 views

CVE-2024-51521

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

5.7CVSS0.00106EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/05 9:12 a.m.•74 views

CVE-2024-51521

Summary (CVE-2024-51521): This entry concerns an input-parameter verification vulnerability in Huawei HarmonyOS’ background service module. The impact is availability disruption on successful exploitation, with several sources noting a laxity/type-checking issue in the background task/service com...

5.7CVSS7.1AI score0.00106EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/05 12:00 a.m.•29 views

PT-2024-34685 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an input parameter verification vulnerability in the background service module. Successful exploitation of this vulnerability may affect availability...

5.7CVSS6.8AI score0.00106EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/05 12:00 a.m.•9 views

CVE-2024-51521: Improper Privilege Management

Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability...

5.7CVSS5.9AI score0.00106EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/05 12:00 a.m.•24 views

Huawei HarmonyOS security vulnerabilities

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a type-checking laxity vulnerability, which stems from a type-checking laxity in the background task service module. An attacke...

5.7CVSS6.6AI score0.00106EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/25 12:00 a.m.•39 views

CVE-2024-48700

Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the editpage.php component...

0.00595EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/10/24 3:19 a.m.•11 views

SUSE CVE-2024-49880

In the Linux kernel, the following vulnerability has been resolved: ext4: fix off by one issue in allocflexgd Wesley reported an issue: ================================================================== EXT4-fs dm-5: resizing filesystem from 7168 to 786432 blocks ------------ cut here -----------...

4.4CVSS7.3AI score0.00244EPSS
SaveExploits0References5
Snyk
Snyk
•added 2024/10/01 10:27 p.m.•17 views

Cross-site Scripting (XSS)

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Set Background option in the Manage Custom Maps section, by uploading a malicious SV...

6.1CVSS5.3AI score0.00411EPSS
SaveExploits1References2
Snyk
Snyk
•added 2024/10/01 6:46 a.m.•7 views

Race Condition

Overview terra-notebook-utils is an Utilities for the Terra notebook environment. Affected versions of this package are vulnerable to Race Condition in task submission due to improper thread synchronization. The issue could lead to crashes or inconsistent task states when tasks are submitted from...

8.3CVSS6.9AI score
SaveExploits0References3
Rows per page
Query Builder