CVE-2024-25035

IBM Cognos Controller 11.0.0 and 11.0.1 exposes server details that could allow an attacker to obtain information of the application environment to conduct further attacks...

SUSE-SU-2024:4124-1 Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001347 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool bsc1225429. - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix...

SUSE-SU-2024:4122-1 Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001335 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool bsc1225429. - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix...

SPEmailHandler-PHP has Potential Abuse for Sending Arbitrary Emails

Impact Messages sent using this script are vulnerable to abuse, as the script allows anybody to specify arbitrary email recipients and include user-provided content in confirmation emails. This could enable malicious actors to use your server to send spam, phishing emails, or other malicious...

CVE-2024-53860 Potential Abuse for Sending Arbitrary Emails in sp-php-email-handler

sp-php-email-handler is a PHP package for handling contact form submissions. Messages sent using this script are vulnerable to abuse, as the script allows anybody to specify arbitrary email recipients and include user-provided content in confirmation emails. This could enable malicious actors to...

CVE-2018-11952 Improper Authentication in TrustZone

An image with a version lower than the fuse version may potentially be booted lead to improper authentication...

Malicious code in crypt-research (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 488cc5e5910fdc7c554f6c3b87979d4abe9cd560a718f367505c58d4ffec25d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2024-3282 Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager

Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager...

CVE-2024-53056

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtkcrtcdestroy In mtkcrtccreate, if the call to mboxrequestchannel fails then we set the "mtkcrtc-cmdqclient.chan" pointer to NULL. In that situation, we do not call cmdqpktcreate...

DEBIAN-CVE-2024-53425

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...

PT-2025-11201 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue arises when a maliciously crafted CATPRODUCT file is parsed through Autodesk AutoCAD, leading to an Uninitialized Variable vulnerability. This can be exploited by a...

Wireshark 4.2.x < 4.2.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.2.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.2.9 advisory. - The FiveCo RAP dissector could go into an infinite loop. Fixed in master: d8ca9fc339 Fixed in release-4.4:...

CVE-2024-53056

CVE-2024-53056 affects the Linux kernel in the drm/mediatek component, specifically the mtk_crtc_destroy() NULL-dereference risk caused by cleanup behavior when mtk_crtc_create() fails to obtain a channel via mbox_request_channel(). The issue arises because, if the call to mbox_request_channel() ...

CVE-2024-53056 drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix potential NULL dereference in mtkcrtcdestroy In mtkcrtccreate, if the call to mboxrequestchannel fails then we set the "mtkcrtc-cmdqclient.chan" pointer to NULL. In that situation, we do not call cmdqpktcreate...

CVE-2024-50268

CVE-2024-50268: Linux kernel USB-C UCSI update path fix. The vulnerability stems from user-controlled *cmd via debugfs allowing new_cam values up to 255, while ucsi_ccg_update_set_new_cam_cmd() updates an updated[] buffer sized UCSI_MAX_ALTMODES (30), creating an out-of-bounds read. The issue occ...

CVE-2024-1682 Unclaimed S3 Bucket Reference in psf/requests Documentation

An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This bucket has been claimed by an external party. The use of this unclaimed S3 bucket could lead to data integrity issues, data leakage, availability problems, loss of...

CVE-2024-1682 Unclaimed S3 Bucket Reference in psf/requests Documentation

An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This bucket has been claimed by an external party. The use of this unclaimed S3 bucket could lead to data integrity issues, data leakage, availability problems, loss of...

CVE-2024-42188

creationtimestamp| type| source ---|---|--- 2024-11-14 15:38:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113482052698777533 2024-11-14 18:20:01+00:00| seen| https://t.me/cvedetector/10968...

CVE-2024-7730

creationtimestamp| type| source ---|---|--- 2024-11-14 12:29:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113481310836070806 2024-11-14 14:08:42+00:00| seen| https://t.me/cvedetector/10932 2026-06-19 18:29:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monxwnga622...

Medium: python-pip

Issue Overview: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 Affected Packages: python-pip Issue Correction: Run dnf update python-pip --releasever 2023.6.20241111 to update your system. New Packages: noarch: ...