7604 matches found
CVE-2022-33232
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory...
CVE-2022-42447
HCL Compass is vulnerable to Cross-Origin Resource Sharing CORS. This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request...
CVE-2020-13291
In GitLab before 13.2.3, project sharing could temporarily allow too permissive access...
CVE-2024-3544
Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster group. This vulnerability has been closed by enhancing LoadMaster partner communications to require a shared secret th...
CVE-2024-54423
Cross-Site Request Forgery CSRF vulnerability in Jesse Overright Social Media Sharing social-media-sharing allows Stored XSS.This issue affects Social Media Sharing: from n/a through = 1.1...
CVE-2023-39943
creationtimestamp| type| source ---|---|--- 2025-02-04 22:27:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113947969898021530 2025-02-04 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf6rw6zjj2e 2025-02-05 02:23:53+00:00| seen|...
CVE-2024-57520
creationtimestamp| type| source ---|---|--- 2025-02-04 05:25:45+00:00| seen| https://gist.github.com/hyp164D1/ae76ab25acfbe263b2ed7b24b6e5c621 2025-02-05 22:17:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlyhocd42e 2025-02-06 01:51:04+00:00| seen|...
CVE-2025-0088
creationtimestamp| type| source ---|---|--- 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c 2025-08-18 18:30:59+00:00| seen| MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7...
AZL-56381 CVE-2025-21673 affecting package kernel for versions less than 6.6.76.1-1
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...
CVE-2025-0809
creationtimestamp| type| source ---|---|--- 2025-01-31 05:38:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113921353212036749 2025-01-31 06:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdy3lfcp2f 2025-01-31 07:24:00+00:00| seen|...
CVE-2022-1736
Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...
DEBIAN-CVE-2022-1736
Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...
CVE-2022-1736
Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...
CVE-2022-1736
Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...
CVE-2022-1736
Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...
CVE-2022-1736
Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...
CVE-2024-13504: Improper Neutralization of Input During Web Page Generation
The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dfxp File uploads in all versions up to, and including, 1.7.42 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2022-1736: Undefined Security Weakness
Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default...
Linux CIFS SMB2OPS DoS
The vulnerability of the fs/cifs/smb2ops.c component in the Linux operating system is related to the return of incorrect status codes. Exploiting this vulnerability can allow an attacker to cause a service failure...
Three privacy rules for 2025 (Lock and Code S06E02)
This week on the Lock and Code podcast… It’s Data Privacy Week right now, and that means, for the most part, that you’re going to see a lot of well-intentioned but clumsy information online about how to protect your data privacy. You’ll see articles about iPhone settings. You’ll hear acronyms for...