3725 matches found
CVE-2024-51432
The CVE-2024-51432 entry concerns FiberHome HG6544C RP2743, where the SSID field in the WIFI Clients List is not properly sanitized, enabling Cross Site Scripting that can lead to arbitrary code execution. Affected component: SSID handling in the WIFI Clients List on FiberHome HG6544C RP2743. Roo...
CVE-2024-51432
Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...
CVE-2024-51432
Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...
CLSA-2024-1730369054 squid: Fix of CVE-2023-5824
CVE-2023-5824: Fix improper handling of structural elements to prevent DoS attacks against HTTP and HTTPS clients...
[SECURITY] Fedora 41 Update: xorg-x11-server-Xwayland-24.1.4-1.fc41
Xwayland is an X server for running X clients under Wayland...
Squid 安全漏洞
Squid is a suite of proxy server and web caching server software from Squid open source. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in versions prior to Squid 6.10, which stems from vulnerability...
EulerOS Virtualization 2.12.0 : glib2 (EulerOS-SA-2024-2768)
According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus- based client subscribes to...
CVE-2024-10134
creationtimestamp| type| source ---|---|--- 2024-10-19 12:59:09+00:00| seen| https://t.me/cvedetector/8358 2024-10-19 15:27:50+00:00| seen| https://t.me/HackerArsenal/565...
[SECURITY] Fedora 40 Update: rust-tower-0.5.1-1.fc40
Tower is a library of modular and reusable components for building robust clients and servers...
[SECURITY] Fedora 39 Update: rust-tower-0.5.1-1.fc39
Tower is a library of modular and reusable components for building robust clients and servers...
[SECURITY] Fedora 39 Update: rust-tower0.4-0.4.13-1.fc39
Tower is a library of modular and reusable components for building robust clients and servers...
CVE-2023-32189 Insecure handling SSH key in SUSE Manager when bootstrapping new clients
Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys...
Qnap QTS Bash OS Command Injection (CVE-2014-7169)
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the...
Qnap QTS Cleartext Transmission of Sensitive Information (CVE-2023-34972)
A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the...
CVE-2024-47080 matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver
matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method MatrixClient.sendSharedHistoryKeys is vulnerable to interception by malicious homeservers. The method was introduced by MSC3061 and is commonly used to...
[SECURITY] Fedora 41 Update: rust-tower-0.5.1-1.fc41
Tower is a library of modular and reusable components for building robust clients and servers...
[SECURITY] Fedora 41 Update: rust-tower-http0.5-0.5.2-1.fc41
Tower middleware and utilities for HTTP clients and servers...
SpiceDB 安全漏洞
SpiceDB is a fine-grained permissions database from the Authzed team. SpiceDB has a security vulnerability that stems from the ability to grant inappropriate permissions to clients under certain circumstances...
Amazon Linux 2023 : openssl, openssl-devel, openssl-libs (ALAS2023-2024-721)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-721 advisory. Issue summary: Applications performing certificate name checks e.g., TLSclients checking server certificates may attempt to read an invalid memoryaddress resulting in abnormal termination of the...