3355 matches found
CVE-2024-37972
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-26184
Secure Boot Security Feature Bypass Vulnerability...
UBUNTU-CVE-2024-30105
.NET and Visual Studio Denial of Service Vulnerability...
ayaka-model (0.2.0), ayaka-runtime (0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0, <=0.8.0)
zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob 1.0.0-beta1 - icusegmenter 1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0346...
AZL-42985 CVE-2024-29040 affecting package tpm2-tss for versions less than 2.4.6-4
This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info returned by FapiQuote has to be deserialized by FapiVerifyQuote to the TPM Structure TPMSATTEST. For the field TPM2GENERATED magic of this structure any number can be used...
ZZIPlib security vulnerability
ZZIPlib is a compressed document extraction library. A security vulnerability exists in ZZIPlib version v0.13.77, which stems from a denial of service vulnerability in the zzipfetchdisktrailer function of the /zzip/zip.c file...
CVE-2024-35246
An attacker may be able to cause a denial-of-service condition by sending many packets repeatedly...
CVE-2024-32943
An attacker may be able to cause a denial-of-service condition by sending many SSH packets repeatedly...
USN-6841-1 php7.4, php8.1, php8.2, php8.3 vulnerability
It was discovered that PHP could early return in the filtervar function resulting in invalid user information being treated as valid user information. An attacker could possibly use this issue to expose raw user input information...
CVE-2023-47788 WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability
Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7...
CVE-2024-5558
CWE-367: Time-of-check Time-of-use TOCTOU Race Condition vulnerability exists that could cause escalation of privileges when an attacker abuses a limited admin account...
CVE-2024-5557
CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause exposure of SNMP credentials when an attacker has access to the controller logs...
CVE-2023-52117
Missing Authorization vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid: from n/a through 5.6.6...
Security Bulletin: IBM® Db2® NSE (Net Search Extender) is affected by a vulnerability in the open source Expat library. (CVE-2024-28757)
Summary IBM® Db2® NSE Net Search Extender is affected by a vulnerability in the open source Expat library. Vulnerability Details CVEID:CVE-2024-28757 DESCRIPTION: libexpat could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity XXE...
CVE-2024-37325
Azure Science Virtual Machine DSVM Elevation of Privilege Vulnerability...
CVE-2024-35248
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...
CVE-2024-30101
Microsoft Office Remote Code Execution Vulnerability...
CVE-2024-30103
Microsoft Outlook Remote Code Execution Vulnerability...