Lucene search
+L

2179 matches found

Positive Technologies
Positive Technologies
•added 2024/02/09 12:00 a.m.•27 views

PT-2024-21085 · Git +1 · Min

Name of the Vulnerable Software and Affected Versions: Min versions prior to 1.31.0 Description: The issue arises from local files not being correctly treated as unique security origins, allowing them to improperly request cross-origin resources. For example, a local file may request other local...

8.8CVSS8.4AI score0.00617EPSS
SaveExploits0References6
Mend
Mend
•added 2024/02/09 12:00 a.m.•8 views

CVE-2024-25677

In Min before 1.31.0, local files are not correctly treated as unique security origins, which allows them to improperly request cross-origin resources. For example, a local file may request other local files through an XML document...

8.8CVSS0.00617EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/02/09 12:00 a.m.•16 views

CVE-2024-25677

In Min before 1.31.0, local files are not correctly treated as unique security origins, which allows them to improperly request cross-origin resources. For example, a local file may request other local files through an XML document...

6.8AI score0.00617EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/09 12:00 a.m.•51 views

CVE-2024-25677

In Min before 1.31.0, local files are not correctly treated as unique security origins, which allows them to improperly request cross-origin resources. For example, a local file may request other local files through an XML document...

8.7AI score0.00617EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/09 12:00 a.m.•8 views

CVE-2024-25677: Improper Access Control

In Min before 1.31.0, local files are not correctly treated as unique security origins, which allows them to improperly request cross-origin resources. For example, a local file may request other local files through an XML document...

8.8CVSS5.8AI score0.00617EPSS
SaveExploits0References2
CVE
CVE
•added 2024/02/09 12:00 a.m.•77 views

CVE-2024-25677

CVE-2024-25677 affects Min browser prior to 1.31.0, where local files are not treated as unique security origins, enabling a local file to request other local resources (e.g., via an XML document) and potentially authoring cross-origin access. Concrete details across connected sources show the is...

8.8CVSS8.4AI score0.00617EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/02/09 12:00 a.m.•20 views

Min Security breach

Min is a fast, minimalist browser from Min Open Source. A security vulnerability exists in versions prior to Min 1.31.0, which stems from an incorrect restriction on local files resulting in a security hole...

8.8CVSS6.5AI score0.00617EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/02/07 3:45 a.m.•12 views

SUSE CVE-2024-24857

A race condition was found in the Linux kernel's net/bluetooth device driver in conninfomin,maxageset function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service...

6.4CVSS6.8AI score0.00317EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2024/02/07 3:45 a.m.•9 views

SUSE CVE-2024-24858

A race condition was found in the Linux kernel's net/bluetooth in conn,advmin,maxintervalset function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service...

5.3CVSS6.6AI score0.00325EPSS
SaveExploits0References3
osv-ubuntu
osv-ubuntu
•added 2024/02/05 8:15 a.m.•16 views

UBUNTU-CVE-2024-24860

A race condition was found in the Linux kernel's bluetooth device driver in min,maxkeysizeset function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue...

5.3CVSS6.2AI score0.00805EPSS
SaveExploits0References23
Cvelist
Cvelist
•added 2024/02/05 7:31 a.m.•52 views

CVE-2024-24857 Race condition vulnerability in Linux kernel bluetooth in conn_info_{min,max}_age_set()

A race condition was found in the Linux kernel's net/bluetooth device driver in conninfomin,maxageset function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service...

4.6CVSS7.2AI score0.00317EPSS
SaveExploits0References3
CVE
CVE
•added 2024/02/05 7:31 a.m.•248 views

CVE-2024-24857

Summary (CVE-2024-24857) : A race condition in the Linux kernel’s net/bluetooth driver function conn_info_{min,max}age_set() may cause an integrity overflow, potentially causing Bluetooth connection abnormalities or DoS. Public sources place this as a kernel issue affecting the Bluetooth subsyste...

6.8CVSS7.3AI score0.00317EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/02/05 7:28 a.m.•44 views

CVE-2024-24859 Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()

A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service...

4.6CVSS6.8AI score0.00712EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/05 12:00 a.m.•11 views

Linux kernel code issue vulnerability

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel due to a null pointer dereference in the min,maxkeysizeset method of the bluetooth device driver...

5.3CVSS6.2AI score0.00805EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/05 12:00 a.m.•2 views

CVE-2024-24859: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service...

4.8CVSS5.7AI score0.00712EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/05 12:00 a.m.•13 views

Linux kernel Competition Condition Problem Vulnerability

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a Bluetooth sniffing exception in the sniffmin,maxintervalset method of net/bluetooth...

4.8CVSS6.5AI score0.00712EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/04 12:00 a.m.•5 views

PT-2024-1604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition was found in the Linux kernel's net/bluetooth in the sniff min,max interval set function. This can result in a bluetooth sniffing exception issue, possibly leading to...

4.8CVSS5.8AI score0.00712EPSS
SaveExploits0
Kitploit
Kitploit
•added 2024/02/01 11:30 a.m.•46 views

Sncscan - Tool For Analyzing SAP Secure Network Communications (SNC)

Tool for analyzing SAP Secure Network Communications SNC. How to use? In its current state, sncscan can be used to read the SNC configurations for SAP Router and DIAG SAP GUI connections. The implementation for the SAP RFC protocol is currently in development. SAP Router SAP Routers can either...

7.3AI score
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2023/12/21 6:25 p.m.•1 views

org.keycloak:keycloak-dependencies-server-all (1.9.0.final), org.keycloak:keycloak-dependencies-server-min (1.9.0.final) +2 more potentially affected by CVE-2023-6291 via org.keycloak:keycloak-services (1.9.0.final)

org.keycloak:keycloak-services MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.final -...

7.1CVSS0.0095EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2023/12/21 6:25 p.m.•0 views

io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-crypto-fips1402 (21.1.0) +13 more potentially affected by CVE-2023-6291 via org.keycloak:keycloak-services (21.1.0)

org.keycloak:keycloak-services MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 - org.keycloak:keycloak-crypto-fips1402 21.1.0 -...

7.1CVSS0.0095EPSS
SaveExploits0
Rows per page
Query Builder