17766 matches found
CVE-2021-47017
A use-after-free flaw was found in ath10khtcsendbundle in ath10k in the Linux Kernel...
The vulnerability of an organization’s software for app compatibility with Rack and CORS allows a perpetrator to influence the integrity, confidentiality, and accessibility of information. This vulnerability is related to the improper use of standard permissions.
The vulnerability of an organization’s application compatibility with Rack applications and CORS Rack-cors is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to influence the integrity, confidentiality, and accessibility of information...
CVE-2021-46939
creationtimestamp| type| source ---|---|--- 2024-02-27 20:11:57+00:00| seen| https://t.me/ctinow/194815 2024-02-28 09:16:57+00:00| seen| https://t.me/ctinow/195220...
CVE-2023-52472
A null pointer dereference flaw was found in mpialloc in the crypto rsa subcomponent in the Linux kernel...
CVE-2023-48678
CVE-2023-48678 affects Acronis Cyber Protect 16 (Linux and Windows) before build 37391. Root cause: insecure folder permissions leading to sensitive information disclosure. CVSS 3.1/3.0 base metrics indicate high confidentiality impact with local, low-complexity access and low privileges required...
CVE-2024-26144
Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain...
CVE-2024-1423
Rejected reason: Accidental Request...
CVE-2024-0551
CVE-2024-0551 describes an access-control error that allows exporting the database and related data via the default user role for users with prior system access. The export mechanism uses a deterministic name, and the download is initiated by the UI before the export is deleted from the system, i...
CVE-2024-26606
A flaw was found in the Linux kernel. This issue is in the binder subsystem...
CVE-2021-46925
CVE-2021-46925 affects the Linux kernel’s net/smc: a race between smc_cdc_tx_handler() and smc_release() can lead to a use-after-free of smc_sock, causing a kernel panic when CDC messages are in flight. The root cause is a race where smc_cdc_tx_handler() may access a smc_sock that has already bee...
CVE-2024-0759
CVE-2024-0759 involves AnythingLLM enabling an attacker with internal-network access and manager/admin privileges to link-scrape IPs of other services on the same network. The root cause is exposure via a link collector that can be used without authentication, allowing internal IP discovery throu...
CVE-2024-26144
A flaw was found in Active Storage that may lead to a sensitive session information leak. By default, Active Storage sends a Set-Cookie header along with the user’s session cookie when serving blobs and sets Cache-Control to public. Certain proxies may cache Set-Cookie, leading to an information...
Netis Router Detection Consolidation
Consolidation of Netis Router device detections. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...
CVE-2024-0243
LangChain’s CVE-2024-0243 describes an SSRF in the RecursiveUrlLoader used by LangChain, where an attacker controlling the content at a base URL (e.g., https://example.com) can inject links that cause the crawler to fetch external URLs despite prevent_outside being set. The issue is fixed in the ...
CVE-2024-27133
CVE-2024-27133 : Affects MLflow. Insufficient sanitization of dataset table fields in MLflow recipes can cause a client-side XSS, which in turn can lead to a client-side RCE when running the recipe in Jupyter Notebook . Root cause: lack of input sanitization for untrusted datasets in the data tab...
CVE-2021-33072
Rejected reason: This is unused...
CVE-2021-33085
Rejected reason: This is unused...
CAN-2004-0103
CVE-2004-0103 affects crawl prior to 4.0.0 beta23, where copying a specific environment variable may bypass bounds checking, potentially allowing local privilege escalation via a buffer overflow. The vulnerability is documented across multiple sources (NVD/OSV Debian advisory references) with Deb...
CAN-2005-2958
The CVE-2005-2958 entry concerns the GNOME Data Access library libgda/libgda2. Two format string vulnerabilities in its logging routines could potentially allow arbitrary code execution in applications that use libgda. Diverse advisories (Debian DSA 871-1/871-2, Gentoo GLSA 200511-01, OpenVAS ent...