CVE-2024-54475

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to determine a user’s current location...

CVE-2024-44172

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15. An app may be able to access contacts...

CVE-2024-44172

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access contacts...

CVE-2024-44172

CVE-2024-44172 is a macOS privacy issue where an app may access contacts due to insufficient private data redaction in log entries. The vulnerability is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, and macOS Sequoia 15. Affected components and exact root cause are described in the Apple se...

Relative Path Traversal

github.com/hashicorp/go-slug is vulnerable to Relative Path Traversal. The vulnerability is due to improper path validation when extracting user-provided paths from tar entries, allowing for directory traversal and potential overwriting of arbitrary files...

CVE-2024-44172: Incorrect Authorization

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access contacts...

CVE-2024-35150

IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is written to logs, which could allow an attacker to inject false log entries...

CVE-2024-35150: Improper Output Neutralization for Logs

IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is written to logs, which could allow an attacker to inject false log entries...

RHSA-2024:1802

creationtimestamp| type| source ---|---|--- 2025-01-24 06:12:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2874 2025-01-31 01:12:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3545...

RHSA-2024:2696

creationtimestamp| type| source ---|---|--- 2025-01-24 06:12:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2874 2025-01-31 01:12:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3545...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes CVE-2024-38538 In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUGON on mmapPROTWRITE, MAPPRIVATE...

CVE-2025-0612

creationtimestamp| type| source ---|---|--- 2025-01-22 19:03:32+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113873558659039214 2025-01-22 20:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lge6oupv5n2f 2025-01-22 20:35:01+00:00| seen|...

CVE-2025-0395

creationtimestamp| type| source ---|---|--- 2025-01-22 13:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdh7aw6jy2f 2025-01-22 13:49:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgdj3wz7dp2e 2025-01-22 13:49:56+00:00| seen|...

CVE-2025-20617

creationtimestamp| type| source ---|---|--- 2025-01-22 06:03:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2518 2025-01-22 06:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcpqu3ijh2h 2025-01-22 06:44:20+00:00| seen|...

SUSE CVE-2024-57936

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now. Since the max send sge is reported as 13, the stack can give requests up to 13 SGEs. This is causin...

DEBIAN-CVE-2024-57936

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now. Since the max send sge is reported as 13, the stack can give requests up to 13 SGEs. This is causin...

CVE-2024-52973

creationtimestamp| type| source ---|---|--- 2025-01-21 11:11:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113866040068105795 2025-01-21 11:15:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113866055428187297 2025-01-21 11:15:42+00:00| seen|...

CVE-2024-52973 Kibana allocation of resources without limits or throttling leads to crash

An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/logentries/summary. This can be carried out by users with read access to the Observability-Logs feature in Kibana...

Kibana 7.17.23 and 8.14.2 Security Update (ESA-2024-26)

Kibana allocation of resources without limits or throttling leads to crash ESA-2024-26 An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/logentries/summary. This can be carried out by users with read access to the...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect setting of the maximum number of SGEs for work requests in the RDMA/bnxtre module. This could...