13601 matches found
CVE-2024-21234
...
Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host...
Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host...
Oracle PeopleSoft Enterprise CC Common Application Objects 安全漏洞
Oracle PeopleSoft Enterprise CC Common Application Objects is a Common Application Objects component from Oracle Corporation USA. A security vulnerability exists in Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2. An attacker could exploit the vulnerability to update, inser...
PT-2024-7010 · Oracle · Oracle Common Applications Calendar +1
Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.6 through 12.2.13 Description: The issue is related to a vulnerability in the Oracle Common Applications Calendar product, specifically in the Tasks component. This vulnerability can be easily exploited b...
Oracle E-Business Suite 安全漏洞
Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Common Application...
GO-2024-3171 Link Following in github.com/containers/common
Link Following in github.com/containers/common...
Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host...
Rockwell Automation多款产品 安全漏洞
Rockwell Automation ControlLogix and others are products of Rockwell Automation, Inc.Rockwell Automation ControlLogix is a controller.Rockwell Automation GuardLogix Rockwell Automation GuardLogix is a series of controllers.Rockwell Automation CompactLogix is a series of controllers. A security...
Oracle Linux 8 : container-tools:ol8 (ELSA-2024-8038)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8038 advisory. aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah cockpit-podman conmon containernetworking-plugins...
CVE-2024-9859
creationtimestamp| type| source ---|---|--- 2024-10-11 19:33:27+00:00| seen| https://t.me/cvedetector/7715 2026-07-06 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpx4cw55an2r...
CVE-2024-47877
creationtimestamp| type| source ---|---|--- 2024-10-11 19:33:22+00:00| seen| https://t.me/cvedetector/7712...
CVE-2024-41713
creationtimestamp| type| source ---|---|--- 2024-10-11 06:14:27+00:00| seen| https://t.me/CyberBulletin/26067 2024-10-11 06:14:28+00:00| seen| https://t.me/CyberBulletin/1153 2024-10-22 00:24:14+00:00| seen| https://t.me/cvedetector/8572 2024-12-05 11:43:11+00:00| confirmed|...
Malicious code in @copilot-web-widgets/common-core-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 148c6b43da3f4ec787aa611cf721a390eab6918627604a9405d817955e2c472b The OpenSSF Package Analysis project identified '@copilot-web-widgets/common-core-sdk' @ 1.11.0 npm as malicious. It is considered malicious...
CVE-2024-9782
creationtimestamp| type| source ---|---|--- 2024-10-10 15:05:12+00:00| seen| https://t.me/cvedetector/7599 2026-07-12 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqgj6cg6gm2n...
CVE-2024-9623
creationtimestamp| type| source ---|---|--- 2024-10-10 13:24:34+00:00| seen| https://t.me/cvedetector/7577 2024-10-10 15:20:05+00:00| seen| https://t.me/truesecator/6305 2024-10-11 12:24:01+00:00| seen| https://vulnerability.circl.lu/bundle/db9dd42d-746e-40cf-bae6-61042f0c1d48...
PT-2024-7383 · Rockwell Automation · Factorytalk Logix Echo +5
Name of the Vulnerable Software and Affected Versions: Rockwell Automation ControlLogix versions affected versions not specified Rockwell Automation CompactLogix 5380 affected versions not specified Rockwell Automation Compact GuardLogix 5380 SIL 2 affected versions not specified Rockwell...
CVE-2024-47832
creationtimestamp| type| source ---|---|--- 2024-10-09 22:21:00+00:00| seen| https://t.me/cvedetector/7522 2026-06-28 07:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpdfyolqpx2x...
candid-extractor (>=0.1.0, <=0.1.2), purewasm (0.1.0) +12 more potentially affected by CVE-2024-47763 via wasmtime (12.0.2)
wasmtime CARGO version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - candid-extractor =0.1.0, =12.0.0, =12.0.0, =12.0.0, =0.1.2, =0.3.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.0, =12.0.2 Source cves:...