1504 matches found
CVE-2024-23081
ThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the component org.threeten.bp.LocalDate::compareToChronoLocalDate. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The...
BELL-CVE-2024-27983
Bulletin has no description...
BELL-CVE-2024-26734
Bulletin has no description...
BELL-CVE-2024-26774
Bulletin has no description...
SNMP trap events are not logged after "set snmp alarm **** -logging ENABLED"
SNMP trap events are not logged after "set snmp alarm -logging ENABLED" configured...
Vite's `server.fs.deny` did not deny requests for patterns with directories.
Summary Vite dev server option server.fs.deny did not deny requests for patterns with directories. An example of such a pattern is /foo//. Impact Only apps setting a custom server.fs.deny that includes a pattern with directories, and explicitly exposing the Vite dev server to the network using...
BELL-CVE-2024-26659
Bulletin has no description...
CVE-2024-28836
An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When negotiating the TLS version on the server side, it can fall back to the TLS 1.2 implementation of the protocol if it is disabled. If the TLS 1.2 implementation was disabled at build time, a TLS 1.2 client could put a TLS 1.3-only server...
Client drive not mapping after reconnection
Client drive mapped via CDM disappeared after reconnecting by session reliability...
CVE-2024-30808
An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4SubStream::AP4SubStream at Ap4ByteStream.cpp, leading to a Denial of Service DoS, as demonstrated by mp42ts...
PT-2024-23614 · Qdrant · Qdrant
Name of the Vulnerable Software and Affected Versions: Qdrant versions 1.6.1 through 1.8.2 Description: A critical issue affects some unknown processing of the file lib/collection/src/collection/snapshots.rs of the component Full Snapshot REST API, leading to path traversal. The manipulation of...
CVE-2023-6371 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 before 16.9.3, all versions starting from 16.10 before 16.10.1. A wiki page with a crafted payload may lead to a Stored XSS, allowing attackers to perform arbitrary actions on behalf...
BELL-CVE-2024-2466
Bulletin has no description...
CVE-2021-47141
In the Linux kernel, the following vulnerability has been resolved: gve: Add NULL pointer checks when freeing irqs. When freeing notification blocks, we index priv-msixvectors. If we failed to allocate priv-msixvectors see abortwithmsixvectors this could lead to a NULL pointer dereference if the...
Citrix HDX サービスが 2 月 29 日にクラッシュします
2月29日にプロセス WebSocketService.exe がクラッシュしています。...
ALPINE-CVE-2023-46841
Recent x86 CPUs offer functionality named Control-flow Enforcement Technology CET. A sub-feature of this are Shadow Stacks CET-SS. CET-SS is a hardware feature designed to protect against Return Oriented Programming attacks. When enabled, traditional stacks holding both data and return addresses...
Unable to delete versions of vdisks after creating a new merged base
Unable to delete previous versions of a vdisk after merging to a new base. No Target devices were using those versions but Delete was greyed out...
BELL-CVE-2024-26611
Bulletin has no description...