Lucene search
+L

3741 matches found

ATTACKERKB
ATTACKERKB
added 2024/05/08 3:15 p.m.4 views

CVE-2024-32761

Under certain conditions, a data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under...

6.5CVSS5.3AI score0.00465EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/05/08 3:15 p.m.23 views

CVE-2024-32761

Under certain conditions, a data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under...

6.5CVSS6.4AI score0.00465EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/08 3:1 p.m.22 views

CVE-2024-32761 BIG-IP TMM tenants on VELOS and rSeries vulnerability

Under certain conditions, a data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under...

6.5CVSS5.3AI score0.00465EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/08 3:1 p.m.62 views

CVE-2024-32761

CVE-2024-32761 affects BIG-IP TMM tenants on VELOS and rSeries. The issue is a data leakage in the TMM that can randomly expose up to 64 bytes of non-contiguous randomized data; under rare conditions it may trigger a TMM restart, impacting availability. Affected versions are 15.1.0 through 15.1.9...

6.5CVSS5.3AI score0.00465EPSS
SaveExploits0References1Affected Software21
Cvelist
Cvelist
added 2024/05/08 3:1 p.m.31 views

CVE-2024-32761 BIG-IP TMM tenants on VELOS and rSeries vulnerability

Under certain conditions, a data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under...

6.5CVSS6.6AI score0.00465EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2024/05/08 2:17 p.m.17 views

New Spectre-Style 'Pathfinder' Attack Targets Intel CPU, Leak Encryption Keys and Data

Researchers have discovered two novel attack methods targeting high-performance Intel CPUs that could be exploited to stage a key recovery attack against the Advanced Encryption Standard AES algorithm. The techniques have been collectively dubbed Pathfinder by a group of academics from the...

7.4AI score
SaveExploits0
F5 Networks
F5 Networks
added 2024/05/08 12:55 p.m.33 views

K000139217: BIG-IP TMM tenants on VELOS and rSeries vulnerability CVE-2024-32761

Security Advisory Description Under certain conditions, a data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of...

6.5CVSS5.6AI score0.00465EPSS
SaveExploits0Affected Software12
Positive Technologies
Positive Technologies
added 2024/05/08 12:0 a.m.9 views

PT-2024-24833

Name of the Vulnerable Software and Affected Versions BIG-IP versions affected versions not specified Description A potential data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms under certain conditions. However, this issue cann...

6.5CVSS5.4AI score0.00465EPSS
SaveExploits0References8
HackRead
HackRead
added 2024/05/07 11:46 a.m.23 views

Hackers Leak COVID-19 Data of 820K Dominicans, Including Vaccination Info

By Deeba Ahmed A massive data leak of 820,000 Dominicans' personal information including COVID vaccination status has been leaked online puting individuals at risk of identity theft, scams, and social engineering attacks. This is a post from HackRead.com Read the original post: Hackers Leak...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2024/05/05 12:0 a.m.6 views

Avantra 安全漏洞

Avantra is an SAP software from Avantra. Avantra has a security vulnerability that stems from a potential data leak if users can create dashboards using automatically logged-in users...

6.8CVSS6.7AI score0.00385EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2024/05/03 12:0 a.m.8 views

USPS Shipping for WooCommerce – Live Rates < 1.10.0 - Sensitive Information Exposure

Description The USPS Shipping for WooCommerce – Live Rates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.4 via log files. This makes it possible for unauthenticated users to extract potentially sensitive information from log files...

5.3CVSS6.6AI score0.00365EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
added 2024/05/02 9:30 p.m.34 views

libxmljs vulnerable to type confusion when parsing specially crafted XML

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop a...

9.8CVSS8AI score0.01103EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2024/05/02 9:30 p.m.42 views

libxmljs2 type confusion vulnerability when parsing specially crafted XML

libxmljs2 is vulnerable to type confusion when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop and remote code...

8.1CVSS8AI score0.00968EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/05/02 9:30 p.m.7 views

GHSA-MJR4-7XG5-PFVH libxmljs2 type confusion vulnerability when parsing specially crafted XML

libxmljs2 is vulnerable to type confusion when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop and remote code...

9.2CVSS6.5AI score0.00968EPSS
SaveExploits0References4
OSV
OSV
added 2024/05/02 9:30 p.m.4 views

GHSA-6433-X5P4-8JC7 libxmljs vulnerable to type confusion when parsing specially crafted XML

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop a...

9.2CVSS7.7AI score0.01103EPSS
SaveExploits1References4
NVD
NVD
added 2024/05/02 7:15 p.m.10 views

CVE-2024-34391

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop a...

9.8CVSS8.3AI score0.01103EPSS
SaveExploits1References2
NVD
NVD
added 2024/05/02 7:15 p.m.14 views

CVE-2024-34393

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop...

8.1CVSS8.3AI score0.00968EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/02 6:56 p.m.70 views

CVE-2024-34393

Libxmljs2 contains a type confusion vulnerability related to parsing specially crafted XML and then calling attrs() on the result of a parsed node. Affected component is the libxmljs2 XML parsing path; the underlying issue is a type confusion when attrs() is invoked on the grandchild node or resu...

8.1CVSS8.2AI score0.00968EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/02 6:56 p.m.19 views

CVE-2024-34393 libxmljs2 attrs type confusion RCE

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop...

8.1CVSS8.5AI score0.00968EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/02 6:56 p.m.22 views

CVE-2024-34393 libxmljs2 attrs type confusion RCE

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop...

8.1CVSS7.7AI score0.00968EPSS
SaveExploits0References2
Rows per page
Query Builder