CVE-2023-41045

Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for outgoing DNS queries and while that socket is bound to a random port number it is never changed again. This goes against recommended practice sin...

CVE-2022-46804

Improper Neutralization of Formula Elements in a CSV File vulnerability in Narola Infotech Solutions LLP Export Users Data Distinct.This issue affects Export Users Data Distinct: from n/a through 1.3...

CVE-2022-41844

An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetchint, int, Object, int in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088...

Beyond Vulnerability Management – Can You CVE What I CVE?

The Vulnerability Treadmill The reactive nature of vulnerability management, combined with delays from policy and process, strains security teams. Capacity is limited and patching everything immediately is a struggle. Our Vulnerability Operation Center VOC dataset analysis identified 1,337,797...

The vulnerability of the sqlc_add_distinct_node component in the Virtuoso-OpenSource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlcadddistinctnode component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...

CVE-2024-13397

creationtimestamp| type| source ---|---|--- 2025-01-31 02:30:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113920614665135760 2025-01-31 03:15:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyzu4jrie27 2025-01-31 04:12:59+00:00|...

CVE-2024-45368

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This...

CVE-2024-45368 AutomationDirect DirectLogic H2-DM1E Session Fixation

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This...

CVE-2012-6664

Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read or write arbitrary files via a .. dot dot in the 1 get or 2 put commands...

Distinct Intranet Servers Security Vulnerability

Distinct Intranet Servers is a server software package from Distinct, Inc. It includes FTP, TFTP, LPD and BOOTP servers. A security vulnerability exists in Distinct Intranet Servers 3.10 and earlier versions that stems from a multiple directory traversal vulnerability in the TFTP server, which...

CVE-2012-6664

Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read or write arbitrary files via a .. dot dot in the 1 get or 2 put commands...

CVE-2012-6664

Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read or write arbitrary files via a .. dot dot in the 1 get or 2 put commands...

PT-2024-10551 · Unknown · Tftp Server +1

Name of the Vulnerable Software and Affected Versions: Distinct Intranet Servers versions 3.10 and earlier Description: The issue allows remote attackers to read or write arbitrary files via a .. dot dot in the 1 get or 2 put commands. This is due to multiple directory traversal vulnerabilities i...

BIT-MYSQL-CLIENT-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

BIT-MARIADB-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

CVE-2024-25003

creationtimestamp| type| source ---|---|--- 2024-02-09 08:21:53+00:00| seen| https://t.me/ctinow/181862 2024-02-11 15:49:09+00:00| seen| https://t.me/arpsyndicate/3429 2024-02-14 08:57:00+00:00| seen| https://t.me/ctinow/184479 2024-02-14 17:16:44+00:00| seen| https://t.me/ctinow/184829 2024-03-0...

CVE-2023-50136

creationtimestamp| type| source ---|---|--- 2024-01-09 23:26:33+00:00| seen| https://t.me/ctinow/165429 2024-01-16 21:16:47+00:00| seen| https://t.me/ctinow/169006 2024-01-28 08:26:42+00:00| seen| https://t.me/ctinow/174855...

CVE-2023-38653

creationtimestamp| type| source ---|---|--- 2024-01-08 16:32:24+00:00| seen| https://t.me/ctinow/164467 2024-01-11 21:17:12+00:00| seen| https://t.me/ctinow/166839 2024-01-25 13:46:26+00:00| seen| https://t.me/ctinow/173440...

CVE-2023-33036

creationtimestamp| type| source ---|---|--- 2024-01-02 07:27:03+00:00| seen| https://t.me/ctinow/161524 2024-01-03 01:33:06+00:00| seen| https://t.me/cibsecurity/74150 2024-01-22 16:13:56+00:00| seen| https://t.me/ctinow/171252...

CVE-2023-29485

creationtimestamp| type| source ---|---|--- 2023-12-21 02:22:26+00:00| seen| https://t.me/ctinow/157459 2023-12-29 08:16:38+00:00| seen| https://t.me/ctinow/160368 2024-01-14 08:36:57+00:00| seen| https://t.me/ctinow/167963...