14081 matches found
AZL-47282 CVE-2024-7264 affecting package cmake for versions less than 3.30.3-4
libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen getting performed on a pointer to a heap buffer area that i...
System Asset Info Enumeration (Linux / Unix)
Binary data linuxassetinfoenum.nbin...
PT-2024-23842 · Plug&Track +1 · Sensor Net Connect V2 +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A CWE-79 issue allows malicious users to permanently inject arbitrary Javascript code, enabling cross-site scripting. This issue permits malicious users to inject code into web page...
UBUNTU-CVE-2024-7264
libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen getting performed on a pointer to a heap buffer area that i...
Physical Security 101
Protecting your assets: the fundamentals of physical security and enterprise resilience at Wiz...
DEBIAN-CVE-2024-42103
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix adding block group to a reclaim list and the unused list during reclaim There is a potential parallel list adding for retrying in btrfsreclaimbgswork and adding to the unused list. Since the block group is removed from...
CVE-2024-42103 btrfs: fix adding block group to a reclaim list and the unused list during reclaim
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix adding block group to a reclaim list and the unused list during reclaim There is a potential parallel list adding for retrying in btrfsreclaimbgswork and adding to the unused list. Since the block group is removed from...
CVE-2024-1286
The pmpro-membership-maps WordPress plugin, prior to version 0.7 , contains a vulnerability that allows users with at least the contributor role to leak sensitive information regarding users who have a membership on the site. This issue is classified as a Medium severity risk with a High confiden...
AZL-47133 CVE-2024-42078 affecting package kernel for versions less than 5.15.162.2-1
In the Linux kernel, the following vulnerability has been resolved: nfsd: initialise nfsdinfo.mutex early. nfsdinfo.mutex can be dereferenced by svcpoolstatsstart immediately after the new netns is created. Currently this can trigger an oops. Move the initialisation earlier before it can possibly...
DEBIAN-CVE-2024-42076
In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939sendone syzbot reported kernel-infoleak in rawrecvmsg 1. j1939sendone creates full frame including unused data, but it doesn't initialize it. This causes the kernel-infoleak issue...
AZL-47219 CVE-2024-42076 affecting package kernel for versions less than 6.6.43.1-7
In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939sendone syzbot reported kernel-infoleak in rawrecvmsg 1. j1939sendone creates full frame including unused data, but it doesn't initialize it. This causes the kernel-infoleak issue...
UBUNTU-CVE-2024-42078
In the Linux kernel, the following vulnerability has been resolved: nfsd: initialise nfsdinfo.mutex early. nfsdinfo.mutex can be dereferenced by svcpoolstatsstart immediately after the new netns is created. Currently this can trigger an oops. Move the initialisation earlier before it can possibly...
CVE-2024-37857
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/viewcategory.php...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that nfsdinfo.mutex may be referenced by svcpoolstatsstart immediately after the creation of a new...
PT-2024-33125 · Oracle · Oracle Movi Logic
Name of the Vulnerable Software and Affected Versions: Oracle MOVI Logic affected versions not specified Description: The issue concerns a remote code execution vulnerability. No further details are provided about the vulnerability, including any potential impact or exploitation methods...
Malicious code in mkdocs-with-pdfs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6097342dec4553b4c3b0e2ad2292043de6f2579863ffadd9088c4a058c9a6026 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
PT-2024-29580 · Txtdot · Txtdot
Name of the Vulnerable Software and Affected Versions: txtdot versions 1.4.0 through 1.6.0 Description: A Server-Side Request Forgery SSRF issue exists in the /proxy route, allowing remote attackers to send HTTP GET requests to arbitrary targets and retrieve internal network information...
CVE-2024-7101
creationtimestamp| type| source ---|---|--- 2024-07-25 19:25:31+00:00| seen| https://t.me/cvedetector/1630...
