CVE-2024-10476

CVE-2024-10476 concerns default credentials in BD Diagnostic Solutions products. The BD advisories and cross-ref entries state that attackers could access, modify, or delete data (including PHI/PII) and potentially disrupt availability. The scope notes that BD Synapsys Informatics Solution is in ...

CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...

BIT-NODE-MIN-2021-3672

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as we...

Amazon Linux AMI : kernel (ALAS-2024-1952)

The version of kernel installed on the remote host is prior to 4.14.238-125.421. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1952 advisory. A denial-of-service DoS flaw was identified in the Linux kernel due to an incorrect memory barrier in xtreplacetabl...

CVE-2024-54101

Denial of service DoS vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-54109

Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-54108

Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-54101

CVE-2024-54101 is described across multiple sources as a denial-of-service vulnerability in the installation module that can affect availability. Public records list Huawei HarmonyOS and EMUI as the affected ecosystem, with a local attack vector and low attack complexity (NVD metrics: AV:L, AC:L,...

CVE-2024-54101

Denial of service DoS vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS. An attacker could exploit the vulnerability to affect availability...

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2021-005)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2021-005 advisory. vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3903 A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to...

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-014)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-014 advisory. A flaw was found in vim. A possible heap-based buffer overflow vulnerability allows an attacker to input a specially crafted file, leading to a crash or code execution. The highest threat from...

EUVD-2024-43745

Microsoft Message Queuing MSMQ Denial of Service Vulnerability...

KLA77760 DoS vulnerability in Microsoft Browser

Type confusion vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2024-12053 Exploitation Related products Microsoft-Edge CVE list CVE-2024-12053 unknown Solution Install necessary updates from the...

KLA77681 DoS vulnerability in Google Chrome

Denial of service vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Stable Channel Update for Desktop Exploitation Related products Google-Chrome CVE list CVE-2024-12053 unknown Solution Update to the latest...

ROS-20241203-08

Vulnerability in Nextcloud cloud storage creation and utilization software Server is related to the ability to download larger-than-expected websites to find Open-Graph data. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information A...

[SECURITY] [DLA 3966-1] pypy3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3966-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura November 26, 2024 https://wiki.debian.org/LTS -...

Linux amdgpu_job_free_cb Heap Buffer Overflow DoS

The vulnerability of the amdgpujobfreecb function in the drivers/gpu/drm/amd/amdgpu/amdgpujob.c file of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

Siemens SCALANCE M-800 Out-of-Bounds Read (CVE-2021-3506)

An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out- of-bounds memory leading to a system crash or a leak of internal kernel information. The...

KLA77341 DoS vulnerability in Google Chrome

Denial of service vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Stable Channel Update for Desktop Exploitation Related products Google-Chrome CVE list CVE-2024-11395 critical Solutio...