17606 matches found
ROS-20240827-10
A vulnerability in the File Name Handler component of the vim text editor exists due to a bug in the use of pointers after memory release in the dialogchanged function. pointers after memory release in dialogchanged function. Exploitation of the vulnerability could allow an an attacker to cause a...
CVE-2024-43230
CVE-2024-43230 refers to a vulnerability in WordPress Shared Files (Frontend File Upload Form & Secure File Sharing) where sensitive information could be exposed to an unauthenticated actor. Affected: Shared Files plugin for WordPress, versions up to 1.7.28. Root cause and exact exploit details a...
Siemens SCALANCE M-800, RUGGEDCOM RM1224 Improper Input Validation (CVE-2024-41976)
A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.1, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.1, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.1, SCALANCE M812-1 ADSL- Router family All versions V8.1, SCALANCE M816-1...
CVE-2024-41992
creationtimestamp| type| source ---|---|--- 2024-08-22 08:53:06+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/759 2024-08-22 12:21:40+00:00| published-proof-of-concept| https://t.me/HackingInsights/10926 2024-08-23 23:52:29+00:00| published-proof-of-concept|...
BELL-CVE-2024-42283
Bulletin has no description...
CVE-2022-48900
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-7981
creationtimestamp| type| source ---|---|--- 2024-08-22 00:06:53+00:00| seen| https://t.me/cvedetector/3832 2025-03-20 21:18:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8292...
GO-2022-0281 Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman
Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman...
Improper Access Control
ghost and @tryghost/portal is vulnerable for Improper Access Control. The vulnerability is due to missing authentication checks on certain endpoints used for member actions, allowing attackers to perform member-only actions and read member information without proper authorization...
CVE-2024-43871
creationtimestamp| type| source ---|---|--- 2024-08-21 04:00:47+00:00| seen| https://t.me/cvedetector/3718 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...
GO-2023-1670 Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd
Argo CD authenticated but unauthorized users may enumerate Application names via the API in github.com/argoproj/argo-cd...
CVE-2024-30949
An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the gettimeofday function...
CVE-2024-8007
A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform RHOSP director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a...
CVE-2024-38810
A flaw was found in the spring-security package. Missing Authorization when using the @AuthorizeReturnObject in Spring Security allows an attacker to render security annotations ineffective. Mitigation Mitigation for this issue is either not available or the currently available options do not mee...
ROS-20240820-10
Vulnerability of the brnflocalin function in the net/bridge/brnetfilterhooks.c module of the netfilter component of the netfilter kernel of the of the Linux operating system is related to incorrect packet processing. Exploitation of the vulnerability could allow an attacker to affect the...
ROS-20240820-09
Vulnerability of mutexunlock function in spi component of Linux kernel is related to memory usage after mutex addlock is released. Exploitation of the vulnerability could allow an intruder to affect confidentiality, integrity and availability of protected information The vulnerability of the...
ROS-20240820-05
A vulnerability in the JavaFX component of Oracle GraalVM Enterprise Edition virtual machine and Oracle Java SE software platform is related to insufficient input validation. Oracle Java SE platform is related to insufficient input data validation. Exploitation of the vulnerability could allow an...
CVE-2024-23185
A security issue was found in Dovecot. Very large headers can lead to resource exhaustion when parsing messages. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to the message-header-parser, it starts building up a "fullvalue" buffer out of th...
CVE-2024-23184
A flaw was found in Dovecot. Processing a large number of address headers From, To, Cc, Bcc, etc can be excessively CPU intensive. This flaw allows a remote attacker to trigger a denial of service. Mitigation Mitigation for this issue is either not available or the currently available options do...