17765 matches found
CVE-2024-39817
Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App...
CVE-2024-7006
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
CISO: funciones y responsabilidades laborales 🛡️
Significado de CISO En el ámbito corporativo, CISO es un acrónimo ampliamente reconocido que denota a "Chief Information Security Officer", que se puede interpretar en español como el Encargado Principal de Salvaguardar la Información. Este encargo representa una posición esencial en el organigra...
CGA-33CR-QWP7-5VH8
Bulletin has no description...
PT-2024-18813 · WordPress · Remote Content Shortcode
Name of the Vulnerable Software and Affected Versions: Remote Content Shortcode plugin for WordPress versions up to, and including, 1.5 Description: The issue allows authenticated attackers with contributor-level access and above to make web requests to arbitrary locations originating from the we...
CVE-2024-7319
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...
CVE-2024-42112
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: free isb resources at the right time When using MSI/INTx interrupt, the shared interrupts are still being handled in the device remove routine, before free IRQs. So isb memory is still read after it is freed. Thus mov...
PT-2024-29661 · Zitadel · Zitadel
Name of the Vulnerable Software and Affected Versions: Zitadel versions prior to 2.52.3 Zitadel versions prior to 2.53.9 Zitadel versions prior to 2.54.8 Zitadel versions prior to 2.55.5 Zitadel versions prior to 2.56.2 Zitadel versions prior to 2.57.1 Zitadel versions prior to 2.58.1 Description...
CVE-2024-40835
creationtimestamp| type| source ---|---|--- 2024-07-30 02:20:55+00:00| seen| https://t.me/cvedetector/1950 2025-07-15 04:32:33+00:00| seen| https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d 2025-07-15 04:32:34+00:00| seen| https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d...
melloronline.co.uk Cross Site Scripting vulnerability OBB-3950717
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-7091
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where it was possible to disclose limited information of an exported group or project to another user...
CVE-2024-41091
A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...
CVE-2024-7068
creationtimestamp| type| source ---|---|--- 2024-07-24 18:19:12+00:00| seen| https://t.me/cvedetector/1566...
CVE-2024-41090
A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...
CVE-2024-40767
An arbitrary file access flaw was found in Nova. By supplying a RAW format image, a specially crafted QCOW2 image with a backing file path, or a VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file’s contents from the...
CVE-2024-36137
A flaw was found in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. The Node.js Permission Model does not operate on file descriptors. However, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner...
CGA-4R3V-PC9W-XG64
Bulletin has no description...
Kofax Power PDF Out-of-Bounds Read Vulnerability (CNVD-2024-33706)
Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from an out-of-bounds read vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2024-40725
A flaw was found in httpd. The fix for CVE-2024-39884 ignores some uses of the legacy content-type based configuration of handlers. "AddType" and similar configurations, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example,...