17766 matches found
CVE-2024-2176
creationtimestamp| type| source ---|---|--- 2024-03-06 20:26:56+00:00| seen| https://t.me/ctinow/201766 2024-03-06 20:36:29+00:00| seen| https://t.me/ctinow/201787 2024-03-07 21:32:04+00:00| seen| https://t.me/ctinow/202796 2024-03-08 01:41:52+00:00| seen| https://t.me/arpsyndicate/4139...
CVE-2024-26624
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Jenkins AppSpider Plugin missing permission checks
Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names...
CVE-2023-33875
creationtimestamp| type| source ---|---|--- 2024-03-06 13:11:39+00:00| seen| https://t.me/ctinow/201309 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
BIT-VAULT-2020-7220
HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespace. Fixed in 1.3.2...
BIT-MOODLE-2021-20283
The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in each course in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17...
BIT-DOTNET-2023-33135 .NET and Visual Studio Elevation of Privilege Vulnerability
.NET and Visual Studio Elevation of Privilege Vulnerability...
BIT-DOTNET-SDK-2023-36793 Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability...
CVE-2024-26626
The CVE-2024-26626 entry relates to the Linux kernel IP multicast forwarding path (net/ipv4/ipmr.c, function ip_mr_forward). A NULL pointer dereference during multicast packet forwarding could trigger a kernel panic; the issue has been resolved with a kernel patch. Connected sources enumerate the...
CVE-2023-52592
This CVE ID is rejected/withdrawn and does not represent an active vulnerability entry.
CVE-2023-45289
When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a...
CVE-2024-24783 vulnerabilities
Vulnerabilities for packages: gitness, capslock, kyverno-policy-reporter-kyverno-plugin, smarter-device-manager, sonobuoy, nri-memcached, k8sgpt-operator, nri-nginx, metallb, oras, esbuild, kubernetes-csi-livenessprobe, gosu, terraform-docs, argo-workflows, lazygit, helm-push,...
CVE-2024-24784 vulnerabilities
Vulnerabilities for packages: gitness, capslock, kyverno-policy-reporter-kyverno-plugin, smarter-device-manager, sonobuoy, nri-memcached, k8sgpt-operator, nri-nginx, metallb, oras, esbuild, kubernetes-csi-livenessprobe, gosu, terraform-docs, argo-workflows, lazygit, helm-push,...
CVE-2024-24786
The protojson.Unmarshal function is vulnerable to an infinite loop when processing specific forms of invalid JSON. This occurs primarily when unmarshaling into a message containing a google.protobuf.Any value or when the UnmarshalOptions.DiscardUnknown option is enabled. This issue affects severa...
CVE-2023-5457
CVE-2023-5457 is a CWE-1269 issue in the Django-based application where debug=True in Django causes exposure of sensitive information. It affects AiLux imx6 bundle prior to version imx6_1.0.7-2. Root cause: non-release configuration leaking data. Impact: confidentiality, integrity, and availabili...
CVE-2024-21815
Gallagher Command Centre (Gallagher) is affected by CVE-2024-21815 due to insufficiently protected credentials (CWE-522) for third‑party DVR integrations to the Command Centre Server, potentially exposing credentials to authenticated but unprivileged users. Affected versions include 8.60 and prio...
CVE-2024-24275
The CVE-2024-24275 issue affects Teamwire Windows desktop client versions 2.0.1–2.4.0. A Cross Site Scripting (XSS) vulnerability exists in the global search function that allows a remote attacker to obtain sensitive information via a crafted payload. The vulnerability is described across multipl...
