CVE-2024-22348 IBM UrbanCode Velocity cross-origin resource sharing

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains...

CVE-2024-22348

CVE-2024-22348 concerns IBM UrbanCode Velocity and IBM DevOps Velocity. According to the primary entry and corroborating Red Hat/IBM security notes, the vulnerability stems from Cross‑Origin Resource Sharing (CORS) configurations that do not restrict the domain name to trusted origins. Affected p...

CVE-2024-22348 IBM UrbanCode Velocity cross-origin resource sharing

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains...

IBM DevOps Velocity和IBM UrbanCode Velocity 安全漏洞

IBM DevOps Velocity and IBM UrbanCode Velocity are both products of International Business Machines IBM.IBM DevOps Velocity is an enterprise-class release management application that supports cloud-native and local deployments.IBM UrbanCode Velocity is an enterprise-class release management and...

DEBIAN-CVE-2024-57914

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpciirq may meet below NULL pointer dereference issue: 2.641851 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 2.641951 statu...

Find the helpers

Welcome to this week's edition of the Threat Source newsletter. "When I was a boy and I would see scary things in the news, my mother would say to me, 'Look for the helpers. You will always find people who are helping.'" ― Fred Rogers There's no world where following Mr. Roger's advice is wrong...

CVE-2024-54470

creationtimestamp| type| source ---|---|--- 2025-01-15 19:55:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1837 2025-01-15 19:56:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113834132073671712 2025-01-15 20:16:01+00:00| seen|...

DEBIAN-CVE-2024-57883

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: independent PMD page table shared count The folio refcount may be increased unexpectly through trygetfolio by caller such as splithugepages. In hugepmdunshare, we use refcount to check whether a pmd page table is...

CVE-2024-55577

creationtimestamp| type| source ---|---|--- 2025-01-15 05:24:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113830703436231851 2025-01-15 06:11:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1706 2025-01-15 06:15:47+00:00| seen|...

CVE-2024-54142

Discourse AI is a Discourse plugin which provides a number of AI features. When sharing Discourse AI Bot conversations into posts, if the conversation had HTML entities those could leak into the Discourse application when a user visited a post with a onebox to said conversation. This issue has be...

CVE-2024-54142 Cross-site Scripting via Discourse-ai SharedAiConversation onebox in Discourse

Discourse AI is a Discourse plugin which provides a number of AI features. When sharing Discourse AI Bot conversations into posts, if the conversation had HTML entities those could leak into the Discourse application when a user visited a post with a onebox to said conversation. This issue has be...

CVE-2025-21282

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:19:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuhwxz6y2t 2025-01-14 18:48:47+00:00| seen|...

CVE-2024-48890

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwyuidj2r 2025-01-14 15:39:39+00:00| seen| https://t.me/cvedetector/15255 2025-01-14 16:28:27+00:00| seen|...

CISA Releases the JCDC AI Cybersecurity Collaboration Playbook and Fact Sheet

Today, CISA released the JCDC AI Cybersecurity Collaboration Playbook and Fact Sheet to foster operational collaboration among government, industry, and international partners and strengthen artificial intelligence AI cybersecurity. The playbook provides voluntary information-sharing processes...

CVE-2025-0143

creationtimestamp| type| source ---|---|--- 2025-01-14 11:28:41+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lfp5ii6gue24 2025-01-30 19:43:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113919014869578265 2025-01-30 20:16:12+00:00| seen|...

Discourse AI 跨站脚本漏洞

Discourse AI is an open source AI plugin for Discourse. Discourse AI suffers from a cross-site scripting vulnerability that stems from the fact that when sharing a Discourse AI Bot conversation into a post, if there are HTML entities in the conversation, these entities may be leaked to the...

PT-2025-3019 · Discourse · Discourse Ai

Name of the Vulnerable Software and Affected Versions: Discourse AI affected versions not specified Description: The issue concerns the Discourse AI plugin, which provides AI features. When sharing conversations from the Discourse AI Bot into posts, HTML entities from the conversation could leak...

CVE-2024-52935 GPU DDK - psContext->eDM gives OOB write

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

MGASA-2025-0004 Updated opencontainers-runc packages fix security vulnerability

runc 1.1.13 and earlier as well as 1.2.0-rc2 and earlier can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting a race with os.MkdirAll. While this can be used to create empty files, existing...

CVE-2024-13311

creationtimestamp| type| source ---|---|--- 2025-01-09 20:49:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113800364263646320 2025-01-09 21:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlzcqtmp2m 2025-01-09 21:17:25+00:00| seen|...