The vulnerability of the containers-common library in the Golang programming language arises from improper resolution of references before accessing files. This allows attackers to gain access to confidential information.

The vulnerability of the containers-common library in the Golang programming language is related to improper resolution of references before accessing files. Exploiting this vulnerability can allow an attacker to gain access to confidential information by using symbolic references, by mounting...

PT-2024-35165 · Unknown · Common-User-Management

Name of the Vulnerable Software and Affected Versions: common-user-management affected versions not specified Description: The issue concerns a critical security vulnerability in the application endpoint /api/v1/customer/profile-picture, which allows file uploads without proper validation or...

The vulnerability of the rm3100_common_probe() function in the drivers/iio/magnetometer/rm3100-core.c kernel module of the Linux operating system, which involves reading data beyond the allowed buffer limits, allows a malicious actor to cause a service failure.

The vulnerability of the rm3100commonprobe function in the drivers/iio/magnetometer/rm3100-core.c file of the Linux kernel is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-11165

creationtimestamp| type| source ---|---|--- 2024-11-13 17:13:40+00:00| seen| https://t.me/cvedetector/10829...

CVE-2024-28728

creationtimestamp| type| source ---|---|--- 2024-11-13 00:46:32+00:00| seen| https://t.me/cvedetector/10755...

CVE-2024-49512

creationtimestamp| type| source ---|---|--- 2024-11-12 23:05:57+00:00| seen| https://t.me/cvedetector/10740...

CISA, FBI, NSA, and International Partners Release Joint Advisory on 2023 Top Routinely Exploited Vulnerabilities

Today, the Cybersecurity and Infrastructure Security Agency CISA, the Federal Bureau of Investigation FBI, National Security Agency NSA, and international partners released joint Cybersecurity Advisory, 2023 Top Routinely Exploited Vulnerabilities. This advisory supplies details on the top Common...

kernel: drm/amdgpu: validate the parameters of bo mapping operations more clearly

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the parameters of bo mapping operations more clearly Verify the parameters of amdgpuvmbomap/replacemap/clearingmappings in one common place...

kernel: smb: client: fix use-after-free in smb2_query_info_compound()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in smb2queryinfocompound The following UAF was triggered when running fstests generic/072 with KASAN enabled against Windows Server 2022 and mount options...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

kernel: dyndbg: fix old BUG_ON in >control parser

In the Linux kernel, the following vulnerability has been resolved: dyndbg: fix old BUGON in control parser The Linux kernel CVE team has assigned CVE-2024-35947 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051952-CVE-2024-35947-09bb@gregkh/T...

CVE-2024-8882

A buffer overflow vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80AAHN.1C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to cause denial of service DoS conditions via a crafted URL...

CVE-2024-8881

A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80AAHN.1C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system OS commands on an affected device by...

CVE-2023-22478

creationtimestamp| type| source ---|---|--- 2024-11-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-12 2024-11-18 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-18 2024-11-19 00:00:00+00:00| exploited| The...

CVE-2018-20470

creationtimestamp| type| source ---|---|--- 2024-11-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-12 2025-01-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-15 2025-02-05 00:00:00+00:00| seen| The Shadowserver...

CVE-2018-17246

creationtimestamp| type| source ---|---|--- 2024-11-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-12 2024-11-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-18 2024-12-23 00:00:00+00:00| seen| The Shadowserver...

CVE-2021-29442

creationtimestamp| type| source ---|---|--- 2024-11-11 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-11 2024-11-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-12 2024-11-18 00:00:00+00:00| seen| The Shadowserver...

MAL-2024-10551 Malicious code in ads-common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ce13b31db6b72b7a12f51897d3a8041b9894c083ea0da052b7d30a8fd2e224 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-14135

creationtimestamp| type| source ---|---|--- 2024-11-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-10 2024-12-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-15 2024-12-25 00:00:00+00:00| seen| The Shadowserver...

kernel security update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...