17606 matches found
CVE-2024-26606
A flaw was found in the Linux kernel. This issue is in the binder subsystem...
CVE-2021-46925
CVE-2021-46925 affects the Linux kernel’s net/smc: a race between smc_cdc_tx_handler() and smc_release() can lead to a use-after-free of smc_sock, causing a kernel panic when CDC messages are in flight. The root cause is a race where smc_cdc_tx_handler() may access a smc_sock that has already bee...
CVE-2024-0759
CVE-2024-0759 involves AnythingLLM enabling an attacker with internal-network access and manager/admin privileges to link-scrape IPs of other services on the same network. The root cause is exposure via a link collector that can be used without authentication, allowing internal IP discovery throu...
CVE-2024-26144
A flaw was found in Active Storage that may lead to a sensitive session information leak. By default, Active Storage sends a Set-Cookie header along with the user’s session cookie when serving blobs and sets Cache-Control to public. Certain proxies may cache Set-Cookie, leading to an information...
Netis Router Detection Consolidation
Consolidation of Netis Router device detections. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...
CVE-2024-0243
LangChain’s CVE-2024-0243 describes an SSRF in the RecursiveUrlLoader used by LangChain, where an attacker controlling the content at a base URL (e.g., https://example.com) can inject links that cause the crawler to fetch external URLs despite prevent_outside being set. The issue is fixed in the ...
CVE-2024-27133
CVE-2024-27133 : Affects MLflow. Insufficient sanitization of dataset table fields in MLflow recipes can cause a client-side XSS, which in turn can lead to a client-side RCE when running the recipe in Jupyter Notebook . Root cause: lack of input sanitization for untrusted datasets in the data tab...
CVE-2021-33085
Rejected reason: This is unused...
CVE-2021-33072
Rejected reason: This is unused...
CAN-2004-0103
CVE-2004-0103 affects crawl prior to 4.0.0 beta23, where copying a specific environment variable may bypass bounds checking, potentially allowing local privilege escalation via a buffer overflow. The vulnerability is documented across multiple sources (NVD/OSV Debian advisory references) with Deb...
CAN-2005-2958
The CVE-2005-2958 entry concerns the GNOME Data Access library libgda/libgda2. Two format string vulnerabilities in its logging routines could potentially allow arbitrary code execution in applications that use libgda. Diverse advisories (Debian DSA 871-1/871-2, Gentoo GLSA 200511-01, OpenVAS ent...
jp.zekkeijapan.com Cross Site Scripting vulnerability OBB-3857005
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-24309
The CVE-2024-24309 affects the Ecomiz Survey TMA module for PrestaShop, up to version 2.0.0. The Red Hat/NVD entries and related advisories describe a design/logic flaw in the Survey TMA that allows a guest to download personal information without restriction, constituting an information disclosu...
CVE-2024-25130
CVE-2024-25130 affects Tuleap open source: Community Edition versions prior to 15.5.99.76 and Enterprise Edition prior to 15.5-4 (and 15.4-7) are vulnerable when a tracker’s mass update feature is used. The issue can allow users with read access to a tracker to access restricted information. A pa...
flixta.cc Cross Site Scripting vulnerability OBB-3856035
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-24RP-Q3W6-VC56
creationtimestamp| type| source ---|---|--- 2024-02-22 00:46:22+00:00| seen| https://t.me/ctinow/190263 2024-02-22 12:46:47+00:00| seen| https://t.me/ctinow/190682 2024-02-22 18:57:59+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4002 2025-06-12 16:34:43+00:00|...
CVE-2023-6533
The CVE describes a denial-of-service-like effect on Silicon Labs PC Controller by sending a malformed Device Reset Locally Command Class packet. Affected product: Silicon Labs PC Controller (v5.54.0 and earlier). Root cause: malformed local reset packets cause the controller to mark the end devi...
CVE-2024-1708
creationtimestamp| type| source ---|---|--- 2024-02-21 17:22:10+00:00| seen| https://t.me/ctinow/189797 2024-02-21 17:31:30+00:00| seen| https://t.me/ctinow/189811 2024-02-22 10:40:05+00:00| exploited| https://t.me/truesecator/5446 2024-02-22 10:40:07+00:00| seen|...
Design/Logic Flaw
php-svg-lib is a scalable vector graphics SVG file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP 8.0, and doesn't validate if external references are allowed. This might leads to bypass...