694 matches found
Security Bulletin: Vulnerability in Apache Solr (lucene), Apache ZooKeeper and Logstash affect IBM Operations Analytics - Log Analysis (CVE-2024-9823, CVE-2024-47554)
Summary There is a potential denial of service with Apache Commons IO, Eclipse Jetty that affect Apache Solr lucene, Apache ZooKeeper and Logstash used by IBM Operations Analytics - Log Analysis Vulnerability Details CVEID:CVE-2024-9823 DESCRIPTION: There exists a security vulnerability in Jetty'...
PT-2025-15909 · Crates.Io · Tokio
The broadcast channel internally calls clone on the stored value when receiving it, and only requires T:Send. This means that using the broadcast channel with values that are Send but not Sync can trigger unsoundness if the clone implementation makes use of the value being !Sync. Thank you to...
CVE-2025-3240
creationtimestamp| type| source ---|---|--- 2025-04-04 12:36:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10435 2025-04-04 13:07:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyiciu7o72z 2025-04-04 14:40:15+00:00| seen|...
CVE-2025-32052
creationtimestamp| type| source ---|---|--- 2025-04-03 14:34:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274523381930955 2025-04-03 14:34:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274523381930955 2025-04-03 15:07:17+00:00| seen|...
BELL-CVE-2025-21869
Bulletin has no description...
SAP NetWeaver Application Server Java Authorization Issues Vulnerability
SAP NetWeaver Application Server Java is an application server from SAP. An authorization issue vulnerability exists in SAP NetWeaver Application Server Java, which arises from the program not properly checking the authorization of the service endpoint, no details of the vulnerability are availab...
AWS VDP: Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints
The AWS Kendra Intelligent Ranking service was found to incorrectly report the user-agent and network information as "AWS Internal" for four API endpoints that are FIPS endpoints. This issue can lead to the obscuring of request information that may be used to track down an adversary...
CVE-2024-40635 containerd has an integer overflow in User ID handling
containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...
CVE-2025-0652
Removed by vendor...
PT-2025-10570 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly provided, but it appears to be related to a security concern, possibly an XSS issue, as indicated by the hashtag xss. No details about t...
Linux Distros Unpatched Vulnerability : CVE-2024-49861
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix helper writes to read-only maps Lonial found an issue that despite user- and BPF-side frozen BPF map like in case of .rodata, it was still possible to...
Linux Distros Unpatched Vulnerability : CVE-2024-46803
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Check debug trap enable before write dbgevfile In interrupt context, write dbgevfile will be run by work queue. It will cause write dbgevfile...
Linux Distros Unpatched Vulnerability : CVE-2022-49358
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: memleak flow rule from commit path Abort path release flow rule object,...
Linux Distros Unpatched Vulnerability : CVE-2022-49133
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: svm range restore work deadlock when process exit kfdprocessnotifierrelease flush svmrangerestorework which calls svmrangelistlockandflushwork to...
Linux Distros Unpatched Vulnerability : CVE-2024-4741
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: Calling the OpenSSL API function SSLfreebuffers may cause memory to be accessed that was previously freed in some situations Impact summary: A us...
Linux Distros Unpatched Vulnerability : CVE-2013-0435
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allo...
Linux Distros Unpatched Vulnerability : CVE-2012-5088
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect...
Linux Distros Unpatched Vulnerability : CVE-2016-8743
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers...
Linux Distros Unpatched Vulnerability : CVE-2020-14344
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow leading to a heap-buffer overflow was found in The X Input Method XIM client was implemented in libX11 before version 1.6.10. As per upstrea...
