BELL-CVE-2024-42292

Bulletin has no description...

BELL-CVE-2024-42291

Bulletin has no description...

BELL-CVE-2024-42289

Bulletin has no description...

BELL-CVE-2024-42301

Bulletin has no description...

BELL-CVE-2024-42271

Bulletin has no description...

BELL-CVE-2024-42276

Bulletin has no description...

BELL-CVE-2024-42281

Bulletin has no description...

BELL-CVE-2024-42270

Bulletin has no description...

BELL-CVE-2023-52906

Bulletin has no description...

BELL-CVE-2024-42266

Bulletin has no description...

BELL-CVE-2023-52896

Bulletin has no description...

OSV-2024-1044 UNKNOWN READ in H5FL_reg_malloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538113 Crash type: UNKNOWN READ Crash state: H5FLregmalloc H5FLregcalloc H5Ocachechkdeserialize...

CVE-2024-45191

An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes. This is related to software that uses a lookup table for the SubWord step. This refers to the libolm implementation of Olm. NOTE: This vulnerability only...

CVE-2024-45192

An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

GHSA-G8W7-7VGG-X7XG CWA-2024-005: Stackoverflow in wasmd

Component: wasmd Criticality: High ACMv1: I:Critical; L:Likely Patched versions: wasmd 0.53.0, 0.46.0 See CWA-2024-005 for more details...

GO-2022-1161 AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist

AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist...

GO-2022-1171 Alist vulnerable to Path Traversal in github.com/alist-org/alist

Alist vulnerable to Path Traversal in github.com/alist-org/alist...

GO-2022-0456 DoS via malicious p2p message in Go Ethereum in github.com/ethereum/go-ethereum

DoS via malicious p2p message in Go Ethereum in github.com/ethereum/go-ethereum...

GO-2023-2072 Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc

Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc...

Authorization Bypass

com.ctrip.framework.apollo:apollo is vulnerable to an Authorization Bypass. The vulnerability is due to insufficient permission checks in the synchronization configuration feature, allowing an attacker to modify a namespace without the necessary permissions...