CVE-2023-30996

CVE-2023-30996 affects IBM Cognos Analytics (versions 11.1.7, 11.2.4, 12.0.0) and describes information leakage due to unverified sources in inter-origin Windows object messages. The vulnerability is an information disclosure issue rather than remote code execution. Remediation is to upgrade to f...

CVE-2024-26603 x86/fpu: Stop relying on userspace for info to fault in xsave buffer

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Stop relying on userspace for info to fault in xsave buffer Before this change, the expected size of the user space buffer was taken from fxsw-xstatesize. fxsw-xstatesize can be changed from user-space, so it is possible...

clintoncountyinfo.com Improper Access Control vulnerability OBB-3856699

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-14105 · Ember · Ember Znet

Name of the Vulnerable Software and Affected Versions: Ember ZNet versions 7.2.0 through 7.4.0 Description: The issue is related to the use of software AES-CCM instead of integrated hardware cryptographic accelerators in Ember ZNet, potentially increasing the risk of electromagnetic and...

CVE-2024-25129

creationtimestamp| type| source ---|---|--- 2024-02-22 20:26:30+00:00| seen| https://t.me/ctinow/191118 2024-02-22 20:26:39+00:00| seen| https://t.me/ctinow/191124 2024-03-13 15:17:10+00:00| seen| https://t.me/ctinow/206766 2025-02-06 02:44:20+00:00| seen|...

PT-2024-19668

Name of the Vulnerable Software and Affected Versions Flusity-CMS version 2.33 Description A Cross-Site Request Forgery CSRF issue was discovered in Flusity-CMS. The issue is related to the component "/cover/addons/info media gallery/action/edit addon post.php". Recommendations For Flusity-CMS...

flusity CMS Security Vulnerability

flusity CMS is a user interaction interface solution that can be easily changed or added to code. A security vulnerability exists in flusity CMS version v2.33, which originates from a cross-site request forgery CSRF vulnerability in component /cover/addons/infomediagallery/action/editaddonpost.ph...

CVE-2024-23606

creationtimestamp| type| source ---|---|--- 2024-02-20 17:25:35+00:00| seen| https://t.me/ctinow/188752 2024-02-20 17:25:50+00:00| seen| https://t.me/ctinow/188763 2024-02-21 13:13:05+00:00| seen| https://t.me/arpsyndicate/3757...

kernel: OOB Access in smb2_dump_detail

An out-of-bounds read vulnerability was found in smb2dumpdetail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information...

PT-2024-8425

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where the iov iter unit test causes a crash on nommu systems, such as the qemu kc705-nommu emulation. The test calls the vmap function directly,...

PT-2024-7703

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc4-syzkaller-01035-gea7f3cfaa588 Description The vulnerability is related to a use-after-free issue in the ip6 route mpath notify function. This issue can be exploited to potentially elevate privileges in...

CVE-2024-22337

IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279977...

CVE-2023-31728

creationtimestamp| type| source ---|---|--- 2024-02-17 05:21:48+00:00| seen| https://t.me/ctinow/186775...

CVE-2024-0017

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-40093

CVE-2023-40093 is an information-disclosure vulnerability in Google Android where trimmed content could be included in PDF output due to a logic error. It allows local information disclosure with no user interaction; confidentiality is impacted. Public sources cite this CVE in Android security bu...

Information disclosure

In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-39245

DELL ESI Enterprise Storage Integrator for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthenticated attacker could potentially exploit this vulnerability by eavesdropping the network traffic to gain admin level credentials...

PT-2024-12848 · Google · Android

Name of the Vulnerable Software and Affected Versions: MtpPacket.cpp affected versions not specified Description: The issue is related to a heap buffer overflow due to an out of bounds write in multiple functions of MtpPacket.cpp. This could lead to local escalation of privilege with no additiona...

Cisco ASA and FTD Information Disclosure Vulnerability

Cisco Adaptive Security Appliance ASA and Firepower Threat Defense FTD contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software...

CVE-2023-22390

Intel Thunderbolt DCH drivers for Windows prior to v88 are affected by improper buffer restrictions that may allow an authenticated local user to disclose information. Affected product: Intel Thunderbolt DCH driver for Windows before 88. Root cause: insufficient input validation leading to local ...