CVE-2024-50857

The ipdojob request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting XSS. It allows data exfiltration and enables CSRF attacks. The vulnerability requires specific user permissions within the application to exploit successfully...

CVE-2024-51491

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List CRL based revocation check feature. After retrieving the CRL, notation-go...

CVE-2024-13294

creationtimestamp| type| source ---|---|--- 2025-01-09 21:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdly4boqj27...

CVE-2024-12496

creationtimestamp| type| source ---|---|--- 2025-01-09 11:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhgm2jr2a 2025-01-09 12:14:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113798341295943036 2025-01-09 12:17:02+00:00| seen|...

Iocharger 安全漏洞

Iocharger is an electric vehicle charging and smart energy management solution from Galaxy Zhangtan iocharger, a Chinese company. Iocharger has a security vulnerability that stems from improper neutralization of specific elements...

CVE-2024-12337

creationtimestamp| type| source ---|---|--- 2025-01-08 11:13:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113792436170808261 2025-01-08 11:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7zxsnpbw2a 2025-01-08 11:53:50+00:00| seen|...

GHSA-R5VF-WF4H-82GG

creationtimestamp| type| source ---|---|--- 2025-01-07 15:52:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113787873626385330 2025-01-07 17:41:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/494...

GHSA-WMG4-JQX5-4H9V

creationtimestamp| type| source ---|---|--- 2025-01-06 17:51:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113782677525284582...

CVE-2024-45553

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise...

CVE-2024-45553

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise...

CVE-2024-45553 Use After Free in DSP Services

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption that can occur when adding a process-specific mapping to the global list. The problem may occur if a mapping is...

GHSA-C6FV-7VH8-2RHR

creationtimestamp| type| source ---|---|--- 2025-01-03 17:09:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113765525080037063...

CVE-2024-55995

creationtimestamp| type| source ---|---|--- 2024-12-31 13:54:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113747773259504643 2024-12-31 14:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemacn2neq25 2024-12-31 16:13:35+00:00| seen|...

CVE-2024-56627

creationtimestamp| type| source ---|---|--- 2024-12-27 15:19:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbxj4rlz25 2025-01-28 03:55:22+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lgrkohjywc2m 2025-01-28 06:26:33+00:00| seen|...

CVE-2024-56628

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add architecture specific hugepteclear When executing mm selftests runvmtests.sh, there is such an error: BUG: Bad page state in process uffd-unit-tests pfn:00000 page: refcount:0 mapcount:0 mapping:0000000000000000...

AZL-55745 CVE-2024-56617 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit 5944ce092b97 "archtopology: Build cacheinfo from primary CPU" adds functionality that architectures can use to optionally allocate and build...

CVE-2024-56617 cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit 5944ce092b97 "archtopology: Build cacheinfo from primary CPU" adds functionality that architectures can use to optionally allocate and build...

UBUNTU-CVE-2024-53196

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't retire aborted MMIO instruction Returning an abort to the guest for an unsupported MMIO access is a documented feature of the KVM UAPI. Nevertheless, it's clear that this plumbing has seen limited testing, since...

CVE-2020-9222

There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on specific files that need to be deserialized, local attackers can exploit this vulnerability to elevate permissions. Vulnerability ID: HWPSIRT-2020-05241 This vulnerability has been...