CVE-2024-43064

creationtimestamp| type| source ---|---|--- 2025-01-06 11:12:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113781107563141439 2025-01-06 11:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z24gva622 2025-01-06 11:43:07+00:00| seen|...

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata versions prior to 7.0.8 that stems from the fact that DNS resource name compression may result in small DNS messages containing very large contained hostnames...

PT-2025-35324

Name of the Vulnerable Software and Affected Versions tracing-subscriber versions prior to 0.3.20 Description tracing-subscriber was susceptible to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be injected into terminal output when logged,...

AZL-55247 CVE-2024-56722 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix cpu stuck caused by printings during reset During reset, cmd to destroy resources such as qp, cq, and mr may fail, and error logs will be printed. When a large number of resources are destroyed, there will be lots o...

UBUNTU-CVE-2024-56722

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix cpu stuck caused by printings during reset During reset, cmd to destroy resources such as qp, cq, and mr may fail, and error logs will be printed. When a large number of resources are destroyed, there will be lots o...

CVE-2024-56722 RDMA/hns: Fix cpu stuck caused by printings during reset

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix cpu stuck caused by printings during reset During reset, cmd to destroy resources such as qp, cq, and mr may fail, and error logs will be printed. When a large number of resources are destroyed, there will be lots o...

CVE-2024-56704

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. Dominique: remove confusing variable reset to 0...

Mozilla: Netlify Authentication Token Exposed in Public Mozilla CI Logs

A critical vulnerability was discovered involving the exposure of a Netlify authentication token within publicly accessible logs. The token provided full access to the "Mozilla IT Web SRE" Netlify account, bypassing all restrictions. The token's permissions encompassed roles such as Owner,...

PYSEC-2024-298

OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information SETTINGSSUPPORT. This is due to inadequate access control for support information...

JetBrains TeamCity Improper Access Control Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an improper access...

CVE-2024-46873

creationtimestamp| type| source ---|---|--- 2024-12-23 00:37:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113699339293135358 2024-12-23 00:40:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113699351908622129 2024-12-23 01:15:35+00:00| seen|...

CVE-2024-56349

In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs...

CVE-2024-56349

In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs...

CVE-2024-56349

In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs...

CVE-2024-56349

CVE-2024-56349 affects JetBrains TeamCity prior to 2024.12. The issue is an improper access control that allows unauthorized users to modify build logs, potentially compromising log integrity. Root cause is insufficient authorization checks on build log modificationacross multiple sources (Red Ha...

CVE-2024-56349

In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs...

PT-2024-9846 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.12 Description: The issue is related to improper access control in JetBrains TeamCity, which allowed unauthorized users to modify build logs. This could potentially impact the integrity of protected...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an improper access...

CVE-2024-12729

creationtimestamp| type| source ---|---|--- 2024-12-19 21:04:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113681515115617439 2024-12-19 21:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos66bptg2a 2024-12-19 23:10:58+00:00| seen|...

Remote File Orchestrator Extension 安全漏洞

Remote File Orchestrator Extension is an open source remote file orchestrator extension for Keyfactor. It is used to remotely manage various file-based certificate stores and can be easily extended to manage other certificate stores. A security vulnerability exists in Remote File Orchestrator...