CVE-2024-57656

Summary of CVE-2024-57656 (CVE-2024-57656) : OpenLink Virtuoso Open-Source v7.2.11 contains a DoS vulnerability in the sqlc_add_distinct_node component triggered by crafted SQL statements, as documented in multiple security advisories. The issue affects virtuoso-opensource in affected deployments...

CVE-2024-57653

An issue in the qstvecsetcopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57646

CVE-2024-57646 affects the psiginfo component of openlink virtuoso-opensource v7.2.11, enabling a Denial of Service via crafted SQL statements. Connected advisories (ALAS-2025-2755 / ALAS2-2025-2755) document remediation by upgrading virtuoso-opensource to 7.2.14-2 (and related packages). Remedia...

CVE-2024-57632

CVE-2024-57632 affects MonetDB Server v11.49.1, with a flaw in the is_column_unique component that can cause Denial of Service via crafted SQL statements. CVSSv3.1 base score 7.5 (Network attack, low complexity, no privileges, high availability impact). Connected sources corroborate the affected ...

CVE-2024-51491

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List CRL based revocation check feature. After retrieving the CRL, notation-go...

CVE-2025-22615 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the CadastroAtendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts...

CVE-2025-22142

creationtimestamp| type| source ---|---|--- 2025-01-13 19:59:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113822816616033754 2025-01-13 20:07:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1369 2025-01-13 22:05:40+00:00| seen|...

CVE-2024-44771

creationtimestamp| type| source ---|---|--- 2025-01-13 18:22:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113822434675262534 2025-01-13 21:15:27+00:00| seen| https://t.me/cvedetector/15167 2025-01-14 18:02:21+00:00| seen|...

CVE-2024-6352

A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert...

CVE-2025-22344

creationtimestamp| type| source ---|---|--- 2025-01-13 14:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdwgzqz2p 2025-01-13 15:42:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfn37v5slo2w 2025-01-13 16:14:22+00:00| seen|...

CVE-2024-52936

CVE-2024-52936 involves Imagination Technologies’ PowerVR-GPU and related GPU driver components where kernel software running inside a guest VM can issue improper commands to the GPU firmware, enabling writes outside the guest’s virtualized GPU memory. The root cause is an out-of-bounds/write acc...

CVE-2024-52935

creationtimestamp| type| source ---|---|--- 2025-01-13 10:35:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113820600853245200 2025-01-13 11:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmmcdabjd2d 2025-01-13 11:47:32+00:00| seen|...

Advisory ROSA-SA-2025-2565

software: mcpp 2.7.2 OS: ROSA-CHROME packageevrstring: mcpp-2.7.2-14 CVE-ID: CVE-2019-14274 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Heap-based buffer overflow vulnerability in MCPP in domsg in support.c. CVE-STATUS: The vulnerability has been resolved CVE-REV: To close the vulnerability, run the...

CVE-2025-0406

creationtimestamp| type| source ---|---|--- 2025-01-13 01:36:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113818481083937989 2025-01-13 02:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lflo56cffs2d 2025-01-13 02:47:57+00:00| seen|...

CVE-2024-42181

creationtimestamp| type| source ---|---|--- 2025-01-12 22:08:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113817664516251519 2025-01-12 22:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lflapabypp2n 2025-01-12 22:52:41+00:00| seen|...

[SECURITY] Fedora 40 Update: suricata-7.0.8-1.fc40

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

[SECURITY] Fedora 41 Update: suricata-7.0.8-1.fc41

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

CISA: Suspicious UAS Identification Poster

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Suspicious UAS Identification Postcard

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CVE-2024-57877

In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NTARMPOE Currently poeset doesn't initialize the temporary 'ctrl' variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently an arbitrary value will b...