30888 matches found
CVE-2024-34896
The CVE-2024-34896 entry concerns the Nedis SmartLife Video Doorbell (WIFICDP10GY) and Nedis SmartLife iOS app (v1.4.0). The connected Red Hat, NVD, and CVE records provide concrete detail: users who were previously connected via a peer-to-peer session can continue to access the live video feed e...
CVE-2024-34896
An issue in Nedis SmartLife Video Doorbell WIFICDP10GY, Nedis SmartLife IOS v1.4.0 causes users who are disconnected from a previous peer-to-peer connection with the device to still have access to live video feed...
CVE-2024-34896
An issue in Nedis SmartLife Video Doorbell WIFICDP10GY, Nedis SmartLife IOS v1.4.0 causes users who are disconnected from a previous peer-to-peer connection with the device to still have access to live video feed...
Security update for apptainer
This update for apptainer fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236528 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
Cloud - DaaS - Need to delete hosting connection
Unable to delete a hosting connection...
GHSA-29QP-CRVH-W22M Withdrawn Advisory: github.com/hashicorp/yamux's DefaultConfig has dangerous defaults causing hung Read
Withdrawn Advisory This advisory has been withdrawn because further research determined that github.com/hashicorp/yamux was not vulnerable to denial of service in the manner described. This link is maintained to preserve external references. Original Description The default values for...
Withdrawn Advisory: github.com/hashicorp/yamux's DefaultConfig has dangerous defaults causing hung Read
Withdrawn Advisory This advisory has been withdrawn because further research determined that github.com/hashicorp/yamux was not vulnerable to denial of service in the manner described. This link is maintained to preserve external references. Original Description The default values for...
wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
...
wifi: cfg80211: clear wdev->cqm_config pointer on free
...
smb: Initialize cfid->tcon before performing network ops
...
GO-2025-3408 WITHDRAWN: DefaultConfig has dangerous defaults causing hung Read in github.com/hashicorp/yamux
This report has been withdrawn with reason: "By request of maintainer in https://github.com/golang/vulndb/issues/3453". The default values for Session.config.KeepAliveInterval and Session.config.ConnectionWriteTimeout of 30s and 10s create the possibility for timed out writes that most aren't...
PT-2025-5649 · Go · Go
Name of the Vulnerable Software and Affected Versions: go affected versions not specified Description: The issue arises from the default values of Session.config.KeepAliveInterval and Session.config.ConnectionWriteTimeout, which can cause timed out writes that are not handled properly by readers...
CVE-2024-54852
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injection. Due to improper sanitization of user input, an unauthenticated attacker is then able to perform various malicious actions, such as creating arbitrary...
PT-2025-3081 · Teedy · Teedy
Name of the Vulnerable Software and Affected Versions: Teedy versions 1.9 through 1.12 Description: The issue arises when the LDAP connection is activated, allowing an unauthenticated attacker to exploit the username field of the login form due to improper sanitization of user input. This enables...
PT-2025-5630 · Hashicorp · Yamux
Name of the Vulnerable Software and Affected Versions: github.com/hashicorp/yamux affected versions not specified Description: The issue concerns a potential denial of service due to timed out writes. When the default values for Session.config.KeepAliveInterval and...
CVE-2024-22315
IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection...
CVE-2024-22315
CVE-2024-22315 affects IBM Fusion and IBM Fusion HCI (versions 2.3.0–2.8.2). The root cause is an insecure network connection due to lack of egress/restriction on containerized environments, which could allow an attacker with access to a Fusion container to establish an external network connectio...
CVE-2024-55968
An issue was discovered in DTEX DEC-M DTEX Forwarder 6.1.1. The com.dtexsystems.helper service, responsible for handling privileged operations within the macOS DTEX Event Forwarder agent, fails to implement critical client validation during XPC interprocess communication IPC. Specifically, the...
JetBrains TeamCity < 2024.12.1 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2024.12.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page CVE-2025-24459 - In JetBrains TeamCity before 2024.12.1...