735 matches found
CVE-2024-2029
creationtimestamp| type| source ---|---|--- 2024-04-12 05:26:43+00:00| seen| https://t.me/arpsyndicate/4526 2025-07-21 18:57:10+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/localaicve20242029...
CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2
CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2. An upgraded version of the package is available that resolves this issue...
CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2
CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2. A patched version of the package is available...
AZL-38575 CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
AZL-39505 CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 XZ Backdoor Tools This repository contains to...
CVE-2024-31139
In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector...
CVE-2024-31139
In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector...
CVE-2024-31139: Improper Restriction of XML External Entity Reference
In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector...
CVE-2023-6014
creationtimestamp| type| source ---|---|--- 2024-03-27 16:42:02+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/mlflowcve20236014...
PT-2024-2543 · Jetbrains · Teamcity
Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.03 Description: The issue is related to incorrect restriction of XML external entity references in the continuous integration and delivery system. This could allow a remote attacker to conduct XXE...
CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1
CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1
CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.15-1
CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1
CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...
SUSE CVE-2021-47133
In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix memory leak in amdsfhwork Kmemleak tool detected a memory leak in the amdsfh driver. ==================== unreferenced object 0xffff88810228ada0 size 32: comm "insmod", pid 3968, jiffies 4295056001 age 775.792s h...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: kpt, pulumi-language-java, crossplane-provider-family-aws, crossplane-provider-aws-sns, grafana-agent-operator, supercronic, docker, cadvisor, pulumi, kor, crossplane-provider-aws-firehose, grype, metrics-server, newrelic-infrastructure-agent, secrets-store-csi-drive...
AZL-35667 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.15-2
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: logstash-exporter, temporal-server, cosign-fips, crossplane-provider-aws-kms, runc, helm-operator, protoc-gen-go-grpc, kwok, secrets-store-csi-driver, terraform-provider-sendgrid-fips, trillian-fips, zot, dynamic-localpv-provisioner, eksctl, nerdctl,...
AZL-37119 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...