6655 matches found
CVE-2024-2292
creationtimestamp| type| source ---|---|--- 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...
CVE-2024-10762
creationtimestamp| type| source ---|---|--- 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...
BIT-LIBPHP-2021-21703 PHP-FPM memory access in root process leading to privilege escalation
In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child processes to access memory shared with the...
VOIDFace: a Privacy-Preserving Multi-Network Face Recognition with Enhanced Security
Advancement of machine learning techniques, combined with the availability of large-scale datasets, has significantly improved the accuracy and efficiency of facial recognition. Modern facial recognition systems are trained using large face datasets collected from diverse individuals or public...
Selective KV-Cache Sharing to Mitigate Timing Side-Channels in LLM Inference
Global KV-cache sharing has emerged as a key optimization for accelerating large language model LLM inference. However, it exposes a new class of timing side-channel attacks, enabling adversaries to infer sensitive user inputs via shared cache entries. Existing defenses, such as per-user isolatio...
CVE-2025-24277
creationtimestamp| type| source ---|---|--- 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:56+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-10-03 12:58:48+00:00| seen| https://bsky.app/profile/hexacon.bsky.social/post/3m2c4opaeb22a...
CVE-2025-30767
creationtimestamp| type| source ---|---|--- 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:58+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c...
Linux Distros Unpatched Vulnerability : CVE-2023-53052
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: fix use-after-free bug in refreshcacheworker The UAF bug occurred because we were putting DFS root sessions in cifsumount while DFS cache refresher was...
CVE-2025-32014
creationtimestamp| type| source ---|---|--- 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:40+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...
CVE-2024-45556
creationtimestamp| type| source ---|---|--- 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:42+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...
CVE-2024-43046
creationtimestamp| type| source ---|---|--- 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:41+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...
CVE-2024-43065
creationtimestamp| type| source ---|---|--- 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10 07:00:41+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea...
CVE-2025-71303
creationtimestamp| type| source ---|---|--- 2025-08-09 13:26:57+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:40+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27...
CVE-2025-32422
creationtimestamp| type| source ---|---|--- 2025-08-09 13:26:56+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:39+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2026-06-18 18:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molgis6kux2a...
CVE-2025-32596
creationtimestamp| type| source ---|---|--- 2025-08-09 13:26:56+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:39+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27...
Linux Distros Unpatched Vulnerability : CVE-2021-23963
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over...
Linux Distros Unpatched Vulnerability : CVE-2024-35916
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix NULL pointer dereference in sanitycheck If due to a memory allocation failure...
The vulnerability of the IBM Aspera Faspex file-sharing application, related to incorrect session expiration times, allows attackers to compromise the integrity of the protected information.
The vulnerability of the IBM Aspera Faspex file-sharing application is related to an incorrect session expiration time. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information from a remote location...
Meta accessed women’s health data from Flo app without consent, says court
A jury has ruled that Meta accessed sensitive information from a woman's reproductive health tracking app without consent. The app in question is called Flo Health. Developed in 2015 in Belarus to track menstrual cycles, it has evolved over the years as a tracking app for highly detailed, intimat...
