CVE-2024-49075

Windows Remote Desktop Services Denial of Service Vulnerability...

CVE-2024-49068

Microsoft SharePoint Elevation of Privilege Vulnerability...

AZL-54374 CVE-2024-47538 affecting package gstreamer1-plugins-base 1.20.0-3

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

AZL-62399 CVE-2024-47538 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

CVE-2024-45404

OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious user who commits internal fraud can break through the two-factor authentication and hijack the...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: kiali, dockerize, cosign, secrets-store-csi-driver-provider-gcp, src-fingerprint, nginx-prometheus-exporter, terraform-provider-google, metrics-server, wgcf, minio, spicedb, flux, syft, trillian, sops, k9s, tfsec, sftpgo-plugin-kms, kubevela, tekton-chains, k3s,...

CVE-2024-54527

creationtimestamp| type| source ---|---|--- 2024-12-12 00:59:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113637140264574364 2024-12-12 03:47:11+00:00| seen| https://t.me/cvedetector/12684 2024-12-12 09:59:39+00:00| seen| https://t.me/RussianOSINT/4978 2025-01-09 03:30:03+00:00|...

CVE-2024-54505

creationtimestamp| type| source ---|---|--- 2024-12-12 00:29:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113637022184981140 2024-12-12 03:47:06+00:00| seen| https://t.me/cvedetector/12681 2024-12-12 09:59:39+00:00| seen| https://t.me/RussianOSINT/4978...

CVE-2024-4109

Rejected reason: Red Hat Product Security has determined that this CVE is not a security vulnerability...

UBUNTU-CVE-2024-47538

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

CVE-2024-54474

creationtimestamp| type| source ---|---|--- 2024-12-11 23:44:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113636844995006519...

CVE-2024-54465

creationtimestamp| type| source ---|---|--- 2024-12-11 23:29:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113636785997633881...

CVE-2024-54466

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An encrypted volume may be accessed by a different user without prompting for the password...

CVE-2024-54476

CVE-2024-54476 affects macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. Root cause: improved checks that mitigate an issue where an app could access user‑sensitive data. Impact: unauthorized data access. Remediation: apply the published macOS updates (Sequoia 15.2, Ventura 13.7....

CVE-2024-54508

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2024-54510

CVE-2024-54510 describes a race condition vulnerability in Apple platforms. The NVD entry states a race condition was addressed with improved locking and that the issue could allow an app to leak sensitive kernel state, fixed in iPadOS 17.7.3, watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2...

CVE-2024-47835

CVE-2024-47835 affects GStreamer and specifically the LRC subtitle parser: the null pointer dereference occurs in the parse_lrc function of gstsubparse.c when strchr(line, ']') returns NULL and the code then uses start+1 with g_strdup(), triggering a crash. The issue is triggered when a line lack...

CVE-2024-47778

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gstwavparseadtlchunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. ...

CVE-2024-47774

CVE-2024-47774 affects GStreamer, specifically the gstreamer1-plugins-good component. The root cause is an OOB-read in the function gst_avi_subtitle_parse_gab2_chunk (gstavisubtitle.c) where name_length is read from the input without proper validation, and an overflow condition when name_length &...

CVE-2024-47613

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in gstgdkpixbufdecflush within gstgdkpixbufdec.c. This function invokes memcpy, using outpix as the destination address. outpix is expected to point to the fra...