17606 matches found
CVE-2024-42112
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: free isb resources at the right time When using MSI/INTx interrupt, the shared interrupts are still being handled in the device remove routine, before free IRQs. So isb memory is still read after it is freed. Thus mov...
PT-2024-29661 · Zitadel · Zitadel
Name of the Vulnerable Software and Affected Versions: Zitadel versions prior to 2.52.3 Zitadel versions prior to 2.53.9 Zitadel versions prior to 2.54.8 Zitadel versions prior to 2.55.5 Zitadel versions prior to 2.56.2 Zitadel versions prior to 2.57.1 Zitadel versions prior to 2.58.1 Description...
CVE-2024-40835
creationtimestamp| type| source ---|---|--- 2024-07-30 02:20:55+00:00| seen| https://t.me/cvedetector/1950 2025-07-15 04:32:33+00:00| seen| https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d 2025-07-15 04:32:34+00:00| seen| https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d...
melloronline.co.uk Cross Site Scripting vulnerability OBB-3950717
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-7091
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where it was possible to disclose limited information of an exported group or project to another user...
CVE-2024-41091
A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...
CVE-2024-7068
creationtimestamp| type| source ---|---|--- 2024-07-24 18:19:12+00:00| seen| https://t.me/cvedetector/1566...
CVE-2024-41090
A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...
CVE-2024-40767
An arbitrary file access flaw was found in Nova. By supplying a RAW format image, a specially crafted QCOW2 image with a backing file path, or a VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file’s contents from the...
CVE-2024-36137
A flaw was found in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. The Node.js Permission Model does not operate on file descriptors. However, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner...
CGA-4R3V-PC9W-XG64
Bulletin has no description...
Kofax Power PDF Out-of-Bounds Read Vulnerability (CNVD-2024-33706)
Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from an out-of-bounds read vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2024-40725
A flaw was found in httpd. The fix for CVE-2024-39884 ignores some uses of the legacy content-type based configuration of handlers. "AddType" and similar configurations, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example,...
CGA-45CJ-MQR9-6J37
Bulletin has no description...
projectdiscovery/nuclei allows unsigned code template execution through workflows
Summary Find a way to execute code template without -code option and signature. Details write a code.yaml: yaml id: code info: name: example code template author: ovi3 code: - engine: - sh - bash source: | id http: - raw: - | POST /re HTTP/1.1 Host: Hostname coderesponse workflows: - matchers: -...
Family Location Tracker App Life360 Breach: 443,000 Users’ Data Leaked
Life360, a popular family location tracker app, suffered a data breach affecting 443,000 users. Personal details, including first…...
CVE-2024-21188
...
CVE-2024-21184
...