694 matches found
CVE-2025-24316
The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality...
CVE-2022-49583
In the Linux kernel, the following vulnerability has been resolved: iavf: Fix handling of dummy receive descriptors Fix memory leak caused by not handling dummy receive descriptor properly. iavfgetrxbuffer now sets the rxbuffer return value for dummy receive descriptors. Without this patch, when...
openSUSE Security Advisory (SUSE-SU-2024:0893-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-1230
creationtimestamp| type| source ---|---|--- 2025-02-12 10:45:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113990507036695974 2025-02-12 11:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhy2c4y3xx2x 2025-02-12 14:20:29+00:00| seen|...
ChatGPT Finds XSS IN DeepSeek AI Python Code
ChatGPT finds cross site scripting issues with DeepSeek code examples. Let the AI fights begin! Summary: On 2025-02-09 ChatGPT AI found "security concern" XSS in DeepSeek's AI python code. Background: Consider the simple coding question Q: Write Python CGI which takes as an argument NAME and...
YSA-2025-02 | Yubico
A low severity issue has been identified in YubiKeys versions 5.4.1 through 5.7.3 in the FIDO CTAP PIN/UV Auth Protocol Two implementation. These YubiKey versions use the 16 byte signature length from CTAP PIN/UV Auth Protocol One during the verification step, even when the 32 byte CTAP PIN/UV Au...
CVE-2024-21513
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values. An attacker can exploit this vulnerability and execute arbitrary python code if the...
CVE-2024-29800
Deserialization of Untrusted Data vulnerability in Timber Team & Contributors Timber.This issue affects Timber: from n/a through 1.23.0...
CVE-2024-56962
creationtimestamp| type| source ---|---|--- 2025-01-27 19:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnoe4pmp2b 2025-01-27 19:34:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113901991861032466 2025-01-27 21:52:19+00:00| seen|...
CVE-2025-0066
CVE-2025-0066 affects SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework). The root cause is weak access controls that allow an authenticated or potentially network-based actor to access restricted information, impacting confidentiality, integrity, and availability. Mul...
CVE-2024-43651
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The binary does not seem to be used by the web interface, so it...
GHSA-6PFC-W86R-54Q6 Welcome and About GeoServer pages communicate version and revision information
Impact The welcome and about page includes version and revision information about the software in use including library and components used. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Proof of Concept 1. Welco...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-53057)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53057 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisctreereducebacklog o...
CVE-2024-10772 SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modification
Since the firmware update is not validated, an attacker can install modified firmware on the device. This has a high impact on the availabilty, integrity and confidentiality up to the complete compromise of the device...
CVE-2024-53142
CVE-2024-53142: Linux kernel initramfs fix for filename buffer overrun. Root cause: during initramfs cpio extraction, the do_name() path passed a non-zero-terminated filename to kernel file operations, allowing trailing bytes from uninitialized memory to be incorporated into a created path. Impac...
CVE-2024-51772
creationtimestamp| type| source ---|---|--- 2024-12-03 20:18:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113590738748153208 2024-12-03 23:11:18+00:00| seen| https://t.me/cvedetector/11915...
Ubuntu 16.04 LTS / 18.04 LTS : Ansible regression (USN-6846-2)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6846-2 advisory. USN-6846-1 fixed vulnerabilities in ansible. The update introduced a regression in ansible. This update fixes the problem. We apologize for the...
PT-2024-7497
Name of the Vulnerable Software and Affected Versions: Spring WebFlux affected versions not specified Description: The issue is caused by weaknesses in the authorization procedure of the Spring Framework's WebMvc.fn and WebFlux.fn functional web frameworks. This can allow a remote attacker to...
