CVE-2024-10267

An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. An attacker can leak sensitive user information, including names, emails, and passwords, by attempting to register a new account with an email that is already in use. The server returns all...

CVE-2024-8183

CVE-2024-8183 affects the Prefect framework (prefect, v2.20.2). The issue is a misconfigured Cross-Origin Resource Sharing (CORS) policy that permits unauthorized domains to access sensitive data, potentially enabling unauthorized access to the database and leading to data leaks, confidentiality ...

USN-7360-1 alpine vulnerabilities

It was discovered that Alpine did not use a secure connection under certain circumstances. A remote attacker could possibly use this issue to leak sensitive information. CVE-2020-14929 It was discovered that Alpine could allow untagged responses from an IMAP server before upgrading to a TLS...

USN-7355-1: RestrictedPython vulnerabilities

Nakul Choudhary and Robert Xiao discovered that RestrictedPython did not properly sanitize certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2023-37271 Abhishek Govindarasu, Ankush Menat and War...

CVE-2025-1433

CVE-2025-1433 describes an Out-of-Bounds Read in Autodesk AutoCAD when parsing a malicious MODEL file. Affected component: AutoCAD (MODEL file parsing). Root cause: insufficient validation during MODEL file parsing leading to an out-of-bounds read, enabling crash, data exposure, or arbitrary code...

Autodesk AutoCAD 资源管理错误漏洞

Autodesk AutoCAD is a suite of specialized 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD that originates from parsing a malicious specially crafted 3DM file that could lead to post-release reuse, which could result in a crash, read sensitive data, or...

ROS-20250310-01

Vulnerability of the dpaastartxmit function in the drivers/net/ethernet/freescale/dpaa/dpaaeth.c module of the Linux kernel of the Linux kernel is associated with a data leak. Exploitation of the vulnerability could allow an attacker to affect the confidentiality and availability of protected...

CVE-2025-21835 usb: gadget: f_midi: fix MIDI Streaming descriptor lengths

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

Tata Technologies Hit by Hunters International Ransomware, 1.4TB Data at Risk

Tata Technologies hit by Hunters International ransomware attack. The group threatened to leak 1.4TB of data. Learn about…...

Linux Distros Unpatched Vulnerability : CVE-2024-45779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number o...

Linux Distros Unpatched Vulnerability : CVE-2024-50102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86: fix user address masking non-canonical speculation issue It turns out that AMD has a Meltdown Litetm issue with non-canonical accesses in kernel space. And...

Linux Distros Unpatched Vulnerability : CVE-2022-33742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CV...

Linux Distros Unpatched Vulnerability : CVE-2023-6610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability was found in smb2dumpdetail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash...

Linux Distros Unpatched Vulnerability : CVE-2024-45776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When reading the language .mo file in grubmofileopen, grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead...

Linux Distros Unpatched Vulnerability : CVE-2024-44972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: do not clear page dirty inside extentwritelockedrange BUG For subpage + zoned case, the following workload can lead to rsv data leak at unmount time:...

Linux Distros Unpatched Vulnerability : CVE-2023-46835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The current setup of the quarantine page tables assumes that the quarantine domain domio has been initialized with an address width of DEFAULTDOMAINADDRESSWIDTH...

Linux Distros Unpatched Vulnerability : CVE-2024-46854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dpaa: Pad packets to ETHZLEN When sending packets under 60 bytes, up to three bytes of the buffer following the data may be leaked. Avoid this by extending...

Linux Distros Unpatched Vulnerability : CVE-2024-47776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gstwavparsecuechunk within gstwavparse.c. The...

Linux Distros Unpatched Vulnerability : CVE-2024-41079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: always initialize cqe.result The spec doesn't mandate that the first two double words aka results for the command queue entry need to be set to 0 when th...

Linux Distros Unpatched Vulnerability : CVE-2019-3901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition in perfeventopen allows local attackers to leak sensitive data from setuid programs. As no relevant locks in particular the credguardmutex are...