17766 matches found
CVE-2024-326092
No description is available for this CVE...
CVE-2024-326072
No description is available for this CVE...
CVE-2024-326071
No description is available for this CVE...
CVE-2024-326062
No description is available for this CVE...
CVE-2024-326053
No description is available for this CVE...
CVE-2024-291664
No description is available for this CVE...
CVE-2024-291662
No description is available for this CVE...
CVE-2024-33875
HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Olayoutencode in H5Olayout.c, resulting in the corruption of the instruction pointer...
CVE-2024-32623
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...
CVE-2024-32622
HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from H5Ssetextentsimple in H5S.c...
CVE-2024-32605
HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VMmemcpyvv in H5VM.c called from H5Dcompactreadvv in H5Dcompact.c...
TotalCloud Insights: A Wake-Up Call on Cloud Database Security Failure Rates
In part 1 of this two-part blog, we explored how to safeguard cloud databases from SQL Server threats and lateral movement risks. In this second part, we turn our focus to a comparative analysis of database security across three major cloud service providers CSPs, AWS, Azure, and GCP, as well as...
CVE-2024-33874
HDF5 Library through 1.14.3 has a heap buffer overflow in H5Omtimenewencode in H5Omtime.c...
CVE-2024-32614
HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...
Attacks, Vulnerabilities and Actors 29 April to 5 May 2024
...
CVE-2024-34069
A flaw was found in Werkzeug, where an attacker may be able to execute code on a developer's machine under some circumstances. This issue requires the attacker to get the developer to interact with a domain and subdomain they control and enter the debugger PIN; if they are successful, it allows...
Delta Electronics DIAEnergie SQL Injection Vulnerability
Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics, Taiwan, China. A SQL injection vulnerability exists in Delta Electronics DIAEnergie. An attacker can use this vulnerability to view, add, modify, or delete information in the back-end database...
CVE-2024-34507
An issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. XSS can occur because of mishandling of the 0x1b character, as demonstrated by Special:RecentChanges%1b0000000...
CVE-2024-34506
An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If a user with the necessary rights to move the page opens Special:MovePage for a page with tens of thousands of subpages, then the page will exceed the...