Lucene search
+L

12075 matches found

Cvelist
Cvelist
added 2024/12/04 11:16 a.m.52 views

CVE-2024-54158

In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding...

3.5CVSS0.00308EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/04 11:16 a.m.66 views

CVE-2024-54158

CVE-2024-54158 is associated with JetBrains YouTrack prior to 2024.3.52635, where a spoofing attack was possible due to missing Punycode encoding. The connected Red Hat, CNVD, CVE lists and Nessus plugin entry corroborate the vulnerability in YouTrack versions before 2024.3.52635. The primary imp...

5.3CVSS7AI score0.00308EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.11 views

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a project management tool, developed by JetBrains, supporting cloud hosting and local deployment, providing task management, team collaboration, time tracking and other features for software development, human resources and other scenarios. JetBrains YouTrack suffers from a...

5.3CVSS6.5AI score0.00308EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2024/12/03 12:31 a.m.5 views

SUSE CVE-2024-36615

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...

6.5CVSS6.8AI score0.00436EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/02 12:29 p.m.13 views

CLSA-2024-1733142398 kernel: Fix of 6 CVEs

hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails CVE-2022-49029 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - ext4: no need to continue when the number of entries is 1 CVE-2024-49967 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - packet: in...

7.8CVSS5.8AI score0.00813EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2024/12/02 12:0 a.m.65 views

LimeSurvey < 6.5.0 XSS Vulnerability

LimeSurvey is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.6AI score
SaveExploits0References1
NVD
NVD
added 2024/11/29 7:15 p.m.34 views

CVE-2024-36615

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...

5.9CVSS0.00436EPSS
SaveExploits0References3
OSV
OSV
added 2024/11/29 7:15 p.m.16 views

UBUNTU-CVE-2024-36615

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...

5.9CVSS6.6AI score0.00436EPSS
SaveExploits0References5
CVE
CVE
added 2024/11/29 12:0 a.m.77 views

CVE-2024-36615

The CVE-2024-36615 entry concerns FFmpeg n7.0: a race condition in the VP9 decoder that can cause a data race if video encoding parameters are exported, with side data attached in the decoder thread while read in the output thread. Connected sources (Debian DLA-4440 and OpenSUSE/SUSE advisories) ...

5.9CVSS6.7AI score0.00436EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/11/29 12:0 a.m.12 views

CVE-2024-36615

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...

5.9CVSS6.5AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/11/29 12:0 a.m.14 views

CVE-2024-36615

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...

6.7AI score0.00436EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/29 12:0 a.m.39 views

CVE-2024-36615

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...

0.00436EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2024/11/28 3:56 a.m.12 views

SUSE CVE-2024-42330

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that...

9.1CVSS6.9AI score0.00952EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/27 12:15 p.m.31 views

CVE-2024-42330

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that...

9.1CVSS0.00952EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/27 12:15 p.m.14 views

CVE-2024-42330

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that...

9.1CVSS6.6AI score
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2024/11/27 12:15 p.m.62 views

CVE-2024-42330

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that...

9.1CVSS7.2AI score0.00952EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/27 12:15 p.m.2 views

DEBIAN-CVE-2024-42330

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that...

9.1CVSS8.3AI score0.00952EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/27 12:15 p.m.12 views

UBUNTU-CVE-2024-42330

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that...

9.1CVSS5.8AI score0.00952EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/11/27 12:5 p.m.23 views

CVE-2024-42330 JS - Internal strings in HTTP headers

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that...

9.1CVSS7.1AI score0.00952EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/11/25 12:12 a.m.6 views

netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling

A flaw was found in Netty, where it mishandles Transfer-Encoding whitespace. This flaw allows HTTP Request Smuggling...

7.5CVSS7.1AI score0.03617EPSS
SaveExploits1References5
Rows per page
Query Builder