Lucene search
+L

6216 matches found

BDU FSTEC
BDU FSTEC
•added 2024/07/29 12:00 a.m.•26 views

Self-Registration Component IoT Apache StreamPipes Disruption

The vulnerability of the Self-Registration component in the IoT Apache StreamPipes toolkit is related to synchronization errors when using a common resource. This vulnerability can allow a malicious actor to manipulate the StreamPipes user management process by creating multiple users with the sa...

3.7CVSS5.4AI score0.0066EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/29 12:00 a.m.•3 views

CVE-2024-41035: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor Syzbot has identified a bug in usbcore see the Closes: tag below caused by our assumption that the reserved bits in an endpoint descriptor's...

5.5CVSS5.9AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/29 12:00 a.m.•11 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in nv17tvgetldmodes, where the return value of the drmmodeduplicate function is assigned to mode, which coul...

5.5CVSS6.5AI score0.00236EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/07/27 12:00 a.m.•26 views

PT-2024-37642 · WordPress · Woocommerce Product Table Lite

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Table Lite plugin for WordPress versions up to, and including, 3.5.1 Description: The issue allows authenticated attackers with subscriber access and above to modify post titles of arbitrary posts due to a missing capabili...

6.4CVSS6.1AI score0.00292EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/07/26 12:00 a.m.•10 views

PT-2024-29573 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2024-41807 - Apache Twait Buffer Corruption", "Content": "CVE ID : CVE-2024-41807 Published : July 26, 2024, 4:15 p.m. | 26 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2023-4759. Reason: This record is a...

8.8CVSS7.3AI score0.02194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/18 12:00 a.m.•19 views

PT-2024-37302

Name of the Vulnerable Software and Affected Versions: The Duplica – Duplicate Posts, Pages, Custom Posts or Users plugin for WordPress versions up to, and including, 0.6 Description: The issue allows authenticated attackers with Subscriber-level access and above to create duplicates of users and...

4.3CVSS5.6AI score0.00362EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/07/18 12:00 a.m.•18 views

PT-2024-28364 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2024-39152 - Apache HTTP Server URI Redirect Defence bypass", "Content": "CVE ID : CVE-2024-39152 Published : July 18, 2024, 7:15 p.m. | 32 minutes ago Description : Rejected reason: DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2024-6655. Reason: This record is...

7CVSS7.2AI score0.00468EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/18 12:00 a.m.•7 views

CVE-2024-5997: Missing Authorization

The Duplica – Duplicate Posts, Pages, Custom Posts or Users plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the duplicateuser and duplicatepost functions in all versions up to, and including, 0.6. This makes it possible for authenticate...

4.3CVSS5.7AI score0.00362EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/07/17 6:15 p.m.•19 views

CVE-2024-40639

Rejected reason: This CVE is a duplicate of another CVE...

6.8AI score
SaveExploits0
PyPA
PyPA
•added 2024/07/17 9:15 a.m.•18 views

PYSEC-2024-172

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache StreamPipes in user self-registration.This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and...

5.3CVSS7AI score0.0066EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/07/16 12:00 a.m.•17 views

PT-2024-5227 · Apache · Apache Streampipes

Name of the Vulnerable Software and Affected Versions: Apache StreamPipes versions through 0.93.0 Description: A Time-of-check Time-of-use TOCTOU Race Condition issue exists in the user self-registration component of Apache StreamPipes. This allows an attacker to potentially create multiple...

6.9CVSS7.5AI score0.0066EPSS
SaveExploits0References13
Citrix
Citrix
•added 2024/07/14 12:00 a.m.•25 views

Citrix Endpoint Management: Database issues

Introduction Citrix offers a series of articles dedicated to troubleshooting various database issues, such as connectivity problems, performance bottlenecks, and data corruption. By enabling quick diagnosis and resolution, these articles help minimize downtime and enhance the reliability and...

7.2AI score
SaveExploits0
Citrix
Citrix
•added 2024/07/13 12:00 a.m.•21 views

Error: "A duplicate IP address was assigned" on Provisioning Server Target Devices

Two IP addresses are assigned to individual PVS target devices streaming network adapters. The behavior can occur on every boot, or intermittently. Background This can occur in environments with DHCP solutions which may assign different IP addresses to individual target devices, at pxe dhcp reque...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2024/07/13 12:00 a.m.•30 views

Provisioning Services Server Targets Starting with DHCP Blue Screen 0x000000BC with Duplicate IP Error

Provisioning Services Server 6.0 and later Target Devices utilizing Windows 7 or Windows 2008 Server OS receiving their streaming IP from DHCP, randomly start up to the Windows splash screen and stop at blue screen 0x000000BC. This error translates to a duplicate network address...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2024/07/13 12:00 a.m.•32 views

Static IP Configuration with Boot Device Manager

Attempts to useBoot Device Manager BDM to boot Windows 7, Windows 2008, and Windows 2008 R2 with a static IP addresses might fail; all systems other than the first might experience a fatal exception and display a blue screen with a duplicate IP address error message...

7AI score
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2024/07/12 1:15 p.m.•22 views

UBUNTU-CVE-2024-40995

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: fix possible infinite loop in tcfidrcheckalloc syzbot found hanging tasks waiting on rtnllock 1 A reproducer is available in the syzbot bug. When a request to add multiple actions with the same index is sent, t...

5.5CVSS6.2AI score0.00289EPSS
SaveExploits0References29
osv_ubuntu
osv_ubuntu
•added 2024/07/12 1:15 p.m.•14 views

UBUNTU-CVE-2024-40932

In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .getmodes The duplicated EDID is never freed. Fix it...

5.7CVSS6.2AI score0.00261EPSS
SaveExploits0References30
SUSE CVE
SUSE CVE
•added 2024/07/06 3:00 a.m.•11 views

SUSE CVE-2024-38548

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference In cdnsmhdpatomicenable, the return value of drmmodeduplicate is assigned to mhdpstate-currentmode, and there is a dereference of it in drmmodesetname, which will...

5.5CVSS6.1AI score0.0025EPSS
SaveExploits0References18
NVD
NVD
•added 2024/06/27 1:16 p.m.•37 views

CVE-2024-38515

Rejected reason: This CVE is a duplicate of CVE-2024-38374...

SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/06/27 12:00 a.m.•22 views

PT-2024-37122 · Lunary Ai · Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary versions =v1.2.11 Description: The issue allows an attacker to bypass email validation by using a dot character '.' in the email address, enabling the creation of multiple accounts with essentially the same email address. Thi...

5.3CVSS5.6AI score0.00338EPSS
SaveExploits1References3
Rows per page
Query Builder