Lucene search
+L

3893 matches found

NVD
NVD
added 2025/03/06 4:15 p.m.14 views

CVE-2024-58053

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagatio...

7.5CVSS0.00443EPSS
SaveExploits0References4
NVD
NVD
added 2025/03/05 7:15 p.m.13 views

CVE-2025-27513

OpenTelemetry dotnet is a dotnet telemetry framework. A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 could cause a Denial of Service DoS when a tracestate and traceparent header is received. Even if an application does not explicitly use trace context propagation, receiving these...

7.5CVSS0.00489EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/03/05 6:15 p.m.319 views

OpenTelemetry .NET has Denial of Service (DoS) Vulnerability in API Package

Impact What kind of vulnerability is it? Who is impacted? A vulnerability in OpenTelemetry.Api package 1.10.0 to 1.11.1 could cause a Denial of Service DoS when a tracestate and traceparent header is received. Even if an application does not explicitly use trace context propagation, receiving the...

7.5CVSS6.9AI score0.00489EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-48848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Do not unregister events twice Nicolas reported that using: trace-cmd recor...

7.8CVSS5.6AI score0.00217EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-43826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfs: pass explicit offset/count to trace events nfsfoliolength is unsafe to use without havi...

5.5CVSS5.5AI score0.00227EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/03/02 2:27 a.m.11 views

CVE-2024-54173

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS5.9AI score0.00125EPSS
SaveExploits0References1
Citrix
Citrix
added 2025/03/02 12:0 a.m.14 views

Citrix Infrastructure Monitoring- issue with adding new PVS/SF servers for monitoring from Cloud UI

When Admin tries to add/register new PVS or Storefront Servers for monitoring, the eror message appears:Incorrect token. Ensure you copy and paste the token correctly. The token is valid. Network trace shows 500 response code when the request is send to...

7.3AI score
SaveExploits0
OSV
OSV
added 2025/02/28 10:53 a.m.25 views

USN-7303-2 linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

9.8CVSS6.7AI score0.01369EPSS
SaveExploits0References209
OSV
OSV
added 2025/02/28 3:15 a.m.15 views

CVE-2024-54173

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS5.7AI score0.00125EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/28 3:15 a.m.14 views

CVE-2024-54173

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS0.00125EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/28 2:22 a.m.10 views

CVE-2024-54173 IBM MQ information disclosure

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS4.4AI score0.00125EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/28 2:22 a.m.15 views

CVE-2024-54173 IBM MQ information disclosure

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS0.00125EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/28 2:22 a.m.89 views

CVE-2024-54173

IBM MQ (versions 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD) is affected by CVE-2024-54173, which can disclose potentially sensitive information from trace files read by a local user when webconsole trace is enabled. The root cause is improper management of sensitive trace data (CWE-1323). Impact is lo...

4.7CVSS4.8AI score0.00125EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/28 12:0 a.m.3 views

PT-2025-9047 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD Description: The issue allows potentially sensitive information in trace files to be read by a local user when the web console trace is enabled. Recommendations: For IBM MQ versions 9.3 LTS...

4.7CVSS5.5AI score0.00125EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/27 8:54 p.m.23 views

Security Bulletin: IBM MQ Console is affected by a password disclosure vulnerability (CVE-2024-54173)

Summary IBM MQ Console has addressed a password disclosure vulnerability Vulnerability Details CVEID:CVE-2024-54173 DESCRIPTION: IBM MQ reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled. CWE:CWE-1323: Improper Management o...

4.7CVSS5.6AI score0.00125EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/27 8:38 p.m.20 views

Security Bulletin: IBM MQ Appliance Console is affected by a sensitive information disclosure vulnerability (CVE-2024-54173)

Summary IBM MQ Appliance has addressed a sensitive information disclosure vulnerability in the IBM MQ Console. Vulnerability Details CVEID:CVE-2024-54173 DESCRIPTION: IBM MQ reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enable...

4.7CVSS5.7AI score0.00125EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/02/27 3:15 a.m.11 views

CVE-2024-49570

In the Linux kernel, the following vulnerability has been resolved: drm/xe/tracing: Fix a potential TPprintk UAF The commit afd2627f727b "tracing: Check "%s" dereference via the field and not the TPprintk format" exposes potential UAFs in the xebomove trace event. Fix those by avoiding...

7.8CVSS0.00221EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/02/27 3:8 a.m.4 views

SUSE CVE-2022-49322

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting bootparams="traceevent=initcall:initcallstart tpprintk=1" in the cmdline, the outputprintk was called, and the spinlockirqsave was called in the...

5.5CVSS6.5AI score0.00215EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2025/02/27 3:5 a.m.5 views

SUSE CVE-2022-49540

In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix race in schedule and flush work While booting secondary CPUs, cpusreadlock/unlock is not keeping online cpumask stable. The transient online mask results in below calltrace. 0.324121 CPU1: Booted secondary processo...

4.7CVSS6.2AI score0.00188EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/02/27 3:4 a.m.4 views

SUSE CVE-2022-49622

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid skb access on nfstolen When verdict is NFSTOLEN, the skb might have been freed. When tracing is enabled, this can result in a use-after-free: 1. access to skb-nftrace 2. access to skb-mark 3. computatio...

5.5CVSS7.7AI score0.0025EPSS
SaveExploits0References4
Rows per page
Query Builder