CVE-2024-4773

When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox 126...

CVE-2024-4770 vulnerabilities

Vulnerabilities for packages: firefox-esr...

BIT-PHP-2024-2757 PHP mb_encode_mimeheader runs endlessly for some inputs

In PHP 8.3. before 8.3.5, function mbencodemimeheader runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function...

CVE-2024-0151

Arm is aware of a potential software security issue in code that uses Cortex-M Security Extensions CMSE and has been compiled with tools that implement Arm v8-M Security Extensions Requirements on Development Tools before version 1.4. This issue potentially allows an attacker who can pass...

GO-2024-2833 Denial of service in github.com/octo-sts/app

Excessively large requests can be processed, consuming a large amount of resources. This could potentially lead to a denial of service...

GO-2024-2638 ValidateVoteExtensions function in Cosmos SDK may allow incorrect voting power assumptions in github.com/cosmos/cosmos-sdk

The default ValidateVoteExtensions helper function infers total voting power based on the injected VoteExtension, which are injected by the proposer. If your chain utilizes the ValidateVoteExtensions helper in ProcessProposal, a dishonest proposer can potentially mutate voting power of each...

SUSE-SU-2024:1605-1 Security update for tpm2-0-tss

This update for tpm2-0-tss fixes the following issues: - CVE-2024-29040: Fixed quote data validation by FapiVerifyQuote bsc1223690...

BELL-CVE-2024-33871

Bulletin has no description...

BELL-CVE-2024-27397

Bulletin has no description...

BELL-CVE-2024-27395

Bulletin has no description...

BELL-CVE-2024-24788

Bulletin has no description...

BELL-CVE-2023-44431

Bulletin has no description...

BELL-CVE-2024-34064

Bulletin has no description...

Qualys Is Proud to Sign CISA’s Secure by Design Pledge

Cybersecurity leaders in the U.S. are very familiar with the Cybersecurity and Infrastructure Security Agency CISA and their important work to keep the internet, our country, and its citizens safe from cyber threats. As part of their efforts, CISA has identified secure by design software as a key...

CVE-2024-33118

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController...

GHSA-RVFH-H6C7-FC3C Gradio allows credential leakage on Windows

Gradio before 4.20 allows credential leakage on Windows...

LIEF obtain sensitive information via the name parameter

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...

BELL-CVE-2023-47212

Bulletin has no description...

BELL-CVE-2024-4418

Bulletin has no description...

CVE-2023-37328 GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may va...