17606 matches found
CVE-2024-26626
The CVE-2024-26626 entry relates to the Linux kernel IP multicast forwarding path (net/ipv4/ipmr.c, function ip_mr_forward). A NULL pointer dereference during multicast packet forwarding could trigger a kernel panic; the issue has been resolved with a kernel patch. Connected sources enumerate the...
CVE-2023-52592
This CVE ID is rejected/withdrawn and does not represent an active vulnerability entry.
CVE-2023-45289
When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a...
CVE-2024-24783 vulnerabilities
Vulnerabilities for packages: sbom-scorecard, bazelisk, k3s, kubernetes-csi-livenessprobe, flux-image-reflector-controller, aws-flb-firehose, flux-image-automation-controller, go-bindata, nri-mysql, kubernetes-dashboard-metrics-scraper, actions-runner-controller, tailscale, terraform,...
CVE-2024-24784 vulnerabilities
Vulnerabilities for packages: sbom-scorecard, bazelisk, k3s, kubernetes-csi-livenessprobe, flux-image-reflector-controller, aws-flb-firehose, flux-image-automation-controller, go-bindata, nri-mysql, kubernetes-dashboard-metrics-scraper, actions-runner-controller, tailscale, terraform,...
CVE-2024-24786
CVE-2024-24786 concerns protojson.Unmarshal entering an infinite loop when unmarshalling certain invalid JSON, notably into messages containing google.protobuf.Any or when UnmarshalOptions.DiscardUnknown is set. Connected advisories show multiple vendor/package records (e.g., kata-containers, mob...
CVE-2023-5457
CVE-2023-5457 is a CWE-1269 issue in the Django-based application where debug=True in Django causes exposure of sensitive information. It affects AiLux imx6 bundle prior to version imx6_1.0.7-2. Root cause: non-release configuration leaking data. Impact: confidentiality, integrity, and availabili...
CVE-2024-21815
Gallagher Command Centre (Gallagher) is affected by CVE-2024-21815 due to insufficiently protected credentials (CWE-522) for third‑party DVR integrations to the Command Centre Server, potentially exposing credentials to authenticated but unprivileged users. Affected versions include 8.60 and prio...
CVE-2024-24275
The CVE-2024-24275 issue affects Teamwire Windows desktop client versions 2.0.1–2.4.0. A Cross Site Scripting (XSS) vulnerability exists in the global search function that allows a remote attacker to obtain sensitive information via a crafted payload. The vulnerability is described across multipl...
Exploit for Path Traversal in Grafana
CVE-2021-43798 - Grafana Directory Traversal 🔍 Grafana is an...
rock-interviews.com Cross Site Scripting vulnerability OBB-3864550
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Incorrect Default Permissions
apache-airflow is vulnerable to Incorrect Default Permissions. The vulnerability is due to authenticated Ops and Viewers users being able to view all information on audit logs, including DAG names and usernames they were not permitted to view...
CVE-2024-22463
Dell PowerScale OneFS versions 8.2.x through 9.6.0.x are affected by a vulnerability described as the use of a broken or risky cryptographic algorithm, which can lead to disclosure and integrity concerns for sensitive data. The issue is triggered by the software’s cryptographic implementation rat...
A-PDF All to MP3 Converter 2.0.0 - DEP Bypass via HeapCreate + HeapAlloc Exploit
!/usr/bin/python Exploit Title: A-PDF All to MP3 Converter 2.0.0 - DEP Bypass with HeapCreate + HeapAlloc + somememorycopyfunction ROP chain Date: 16 November 2023 Exploit Author: George Washington Vendor Homepage: http://www.a-pdf.com/all-to-mp3/download.htm Software Link:...
ishraqa.unizwa.edu.om Cross Site Scripting vulnerability OBB-3864112
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...