Jitsi Meet Image Sharing

The vulnerability of the image-sharing function in Jitsi Meet software for video conferencing involves a lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to upload arbitrary GIF files using giphy...

UBUNTU-CVE-2024-50119

In the Linux kernel, the following vulnerability has been resolved: cifs: fix warning when destroy 'cifsiorequestpool' There's a issue as follows: WARNING: CPU: 1 PID: 27826 at mm/slub.c:4698 freelargekmalloc+0xac/0xe0 RIP: 0010:freelargekmalloc+0xac/0xe0 Call Trace: ? warn+0xea/0x330...

WS-2020-0444

All versions of shamir rust crate before 2.0.0 did not properly calculate secret shares requirements. This reduces the security of the shamir secret sharing algorithm by restricting the crate to always using a threshold value of three, rather than a configurable limit...

WS-2022-0005

In the threshold signature scheme, participants start by dividing secrets into shares using a secret sharing scheme. The Verifiable Secret Sharing scheme generates shares from the user’s IDs but does not properly validate them. Using a malicious ID will make other users reveal their secrets durin...

CVE-2024-39721

creationtimestamp| type| source ---|---|--- 2024-10-31 21:57:47+00:00| seen| https://t.me/cvedetector/9538 2025-09-24 00:43:17+00:00| seen| MISP/9e6b1b0e-5fb2-46d6-9aaf-7c64a1324e40 2026-02-21 14:07:01+00:00| seen| https://gist.github.com/vitaliysobur/f447fc26c0787121f1dd7c923623486f 2026-07-26...

CVE-2024-39720

creationtimestamp| type| source ---|---|--- 2024-10-31 21:57:43+00:00| seen| https://t.me/cvedetector/9537 2025-09-24 00:43:17+00:00| seen| MISP/9e6b1b0e-5fb2-46d6-9aaf-7c64a1324e40 2026-02-21 14:07:01+00:00| seen| https://gist.github.com/vitaliysobur/f447fc26c0787121f1dd7c923623486f 2026-05-11...

Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005544 fixes several issues. The following security issues were fixed: CVE-2024-35905: Fixed int overflow for stack access size bsc1226327. CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. CVE-2024-35863: Fixed potential UAF i...

CVE-2024-51424

creationtimestamp| type| source ---|---|--- 2024-10-30 22:33:41+00:00| seen| https://t.me/cvedetector/9474 2025-10-01 18:11:56+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:26+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-51425

creationtimestamp| type| source ---|---|--- 2024-10-30 22:33:25+00:00| seen| https://t.me/cvedetector/9461 2025-10-01 18:11:56+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:26+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-48202

creationtimestamp| type| source ---|---|--- 2024-10-30 20:53:17+00:00| seen| https://t.me/cvedetector/9456 2025-10-01 18:11:56+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:27+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2024-51298

creationtimestamp| type| source ---|---|--- 2024-10-30 15:51:51+00:00| seen| https://t.me/cvedetector/9421 2025-03-19 21:18:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8158 2025-10-01 18:11:56+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08...

CVE-2024-44081

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-44081

In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-44080

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format...

Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024100 fixes several issues. The following security issues were fixed: CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. CVE-2024-35863: Fixed potential UAF in isvalidoplockbreak bsc1225011. CVE-2023-52752: smb: client: fix...

U.S. Government Issues New TLP Guidance for Cross-Sector Threat Intelligence Sharing

The U.S. government USG has issued new guidance governing the use of the Traffic Light Protocol TLP to handle threat intelligence information shared between the private sector, individual researchers, and Federal Departments and Agencies. "The USG follows TLP markings on cybersecurity information...

CVE-2024-50075 xhci: tegra: fix checked USB2 port number

In the Linux kernel, the following vulnerability has been resolved: xhci: tegra: fix checked USB2 port number If USB virtualizatoin is enabled, USB2 ports are shared between all Virtual Functions. The USB2 port number owned by an USB2 root hub in a Virtual Function may be less than total USB2 phy...

CVE-2024-44080

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-44080

In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resulting in clients loading GIFs from any arbitrary URL if a message from another participant contains a URL encoded in the expected format...

CVE-2024-44081

In Jitsi Meet versions prior to 2.0.9779 , an insecure implementation of the video file sharing functionality allows a remote attacker to force clients to load videos from an arbitrary URL . This occurs if a message from another participant contains a URL encoded in the expected format. The vulne...