DEBIAN-CVE-2024-7264

libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen getting performed on a pointer to a heap buffer area that i...

CVE-2024-42091

creationtimestamp| type| source ---|---|--- 2024-07-29 21:19:26+00:00| seen| https://t.me/cvedetector/1907 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-41074

creationtimestamp| type| source ---|---|--- 2024-07-29 17:58:08+00:00| seen| https://t.me/cvedetector/1863 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-41082

creationtimestamp| type| source ---|---|--- 2024-07-29 17:58:02+00:00| seen| https://t.me/cvedetector/1858 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2024-41075

creationtimestamp| type| source ---|---|--- 2024-07-29 17:57:57+00:00| seen| https://t.me/cvedetector/1856 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

Incorrect Access Control

github.com/cert-manager/cert-manager is vulnerable to Incorrect Access Control. The vulnerability is due to insecure permissions in cert-manager, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

cert-manager 安全漏洞

cert-manager is a certificate manager in the cert-manager open source. Adds certificates and certificate issuers as resource types in a Kubernetes cluster and simplifies the process of obtaining, renewing, and using these certificates. A security vulnerability exists in cert-manager v1.14.4 and...

PT-2024-27057 · Unknown · Cert-Manager

Name of the Vulnerable Software and Affected Versions: cert-manager version 1.14.4 Description: The issue is related to insecure permissions, allowing attackers to access sensitive data and escalate privileges by obtaining the service account's token. Recommendations: For cert-manager version...

CVE-2024-36537

CVE-2024-36537 : cert-manager v1.14.4 contains an insecure permissions flaw that allows an attacker to access the service account token and escalate privileges, per NVD/Red Hat/IBM notes. Root cause is improper access control on credentials, enabling exposure of sensitive data. The connected advi...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36537

Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-1975

creationtimestamp| type| source ---|---|--- 2024-07-23 18:04:29+00:00| seen| https://t.me/cvedetector/1513 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

Ukrainian Institutions Targeted Using HATVIBE and CHERRYSPY Malware

The Computer Emergency Response Team of Ukraine CERT-UA has alerted of a spear-phishing campaign that targeted a scientific research institution in the country with malware known as HATVIBE and CHERRYSPY. The agency attributed the attack to a threat actor it tracks under the name UAC-0063, which...

CVE-2024-36132

creationtimestamp| type| source ---|---|--- 2024-07-19 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1339 2024-08-07 06:56:17+00:00| seen| https://t.me/cvedetector/2669...

CVE-2024-37381

creationtimestamp| type| source ---|---|--- 2024-07-18 10:13:10+00:00| seen| https://t.me/HackingInsights/6482 2024-07-19 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1339 2024-07-29 08:46:01+00:00| seen| https://t.me/cvedetector/1814...

openSUSE 15 Security Update : Botan (openSUSE-SU-2024:0201-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0201-1 advisory. Update to 2.19.5: Fix multiple Denial of service attacks due to X.509 cert processing: CVE-2024-34702 - boo1227238 CVE-2024-34703 - boo1227607...

CVE-2024-41008

creationtimestamp| type| source ---|---|--- 2024-07-16 11:15:10+00:00| seen| https://t.me/cvedetector/916 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

OPENSUSE-SU-2024:0201-1 Security update for Botan

This update for Botan fixes the following issues: Update to 2.19.5: Fix multiple Denial of service attacks due to X.509 cert processing: CVE-2024-34702 - boo1227238 CVE-2024-34703 - boo1227607 CVE-2024-39312 - boo1227608 Fix a crash in OCB Fix a test failure in compression with certain versions o...