11989 matches found
CVE-2024-52439
creationtimestamp| type| source ---|---|--- 2024-11-20 11:35:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113515070825253153 2024-11-20 13:44:35+00:00| seen| https://t.me/cvedetector/11598...
CVE-2024-51846
creationtimestamp| type| source ---|---|--- 2024-11-19 23:22:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113512190485101966...
CVE-2024-53079 mm/thp: fix deferred split unqueue naming and locking
In the Linux kernel, the following vulnerability has been resolved: mm/thp: fix deferred split unqueue naming and locking Recent changes are putting more pressure on THP deferred split queues: under load revealing long-standing races, causing listdel corruptions, "Bad page state"s and worse I kee...
GHSA-JW4X-V69F-HH5W
creationtimestamp| type| source ---|---|--- 2024-11-18 17:08:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113505054477519291...
GHSA-VMHX-HWPH-Q6MC
creationtimestamp| type| source ---|---|--- 2024-11-15 17:38:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113488187902526394 2024-11-15 17:42:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113488202426408153...
GHSA-XH4G-C9P6-5JXG
creationtimestamp| type| source ---|---|--- 2024-11-15 16:23:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113487892490978139...
CVE-2024-48900 Moodle: idor when accessing list of badge recipients
A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to...
Warning: Online shopping threats to avoid this Black Friday and Cyber Monday
.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id1206714424da-98margin-top:0px;margin-bottom:var--global-kb-spacing-xl, 4rem;.kb-row-layout-id1206714424da-98 .kt-row-column-wrapalign-content:center;:where.kb-row-layout-id1206714424da-98 .kt-row-column-wrap...
CVE-2024-50151 smb: client: fix OOBs when building SMB2_IOCTL request
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2IOCTL request When using encryption, either enforced by the server or when using 'seal' mount option, the client will squash all compound request buffers down for encryption into a single i...
CVE-2024-50091
In the Linux kernel, the following vulnerability has been resolved: dm vdo: don't refer to dedupecontext after releasing it Clear the dedupecontext pointer in a datavio whenever ownership of the context is lost, so that vdo can't examine it accidentally...
CVE-2024-50136
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Unregister notifier on eswitch init failure It otherwise remains registered and a subsequent attempt at eswitch enabling might trigger warnings of the sort: 682.589148 ------------ cut here ------------ 682.590204...
GHSA-29WX-VH33-7X7R vulnerabilities
Vulnerabilities for packages: terraform, argo-rollouts, argo-workflows-fips, flux-source-controller, nuclei, atlantis-fips, minio-operator, flux-image-reflector-controller, loki-fips, harbor-fips, eks-distro-fips, flux-notification-controller-fips, kubernetes, cluster-autoscaler-fips, cosign-fips...
TeamTNT Exploits 16 Million IPs in Malware Attack on Docker Clusters
This article details a new campaign by TeamTNT, a notorious hacking group, leveraging exposed Docker daemons to deploy…...
[SECURITY] Fedora 40 Update: podman-tui-1.2.3-1.fc40
podman-tui is a terminal user interface for Podman v4 and v5. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...
CVE-2024-47031
Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861...
CVE-2024-47031
Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861...
Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)
Summary Usage of the Butterfly.prototype.parseJSON or getJSON functions on an attacker-controlled crafted input string allows the attacker to execute arbitrary JavaScript code on the server. Since Butterfly JavaScript code has access to Java classes, it can run arbitrary programs. Details The...
On Monday, October 21, updates for the critical Remote Code Execution – VMware vCenter (CVE-2024-38812) vulnerability were released again
On Monday, October 21, updates for the critical Remote Code Execution - VMware vCenter CVE-2024-38812 vulnerabilitywere released again. Wait, haven't fixes for this vulnerability been available since September 17th? They were, but it was not enough. " VMware by Broadcom has determined that the...
CVE-2024-49946
In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in pppchannelbridgeinput Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in the socket backlog is the...