2304 matches found
CVE-2024-13501
creationtimestamp| type| source ---|---|--- 2025-02-18 05:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligixkumha2o 2025-02-18 11:39:00+00:00| seen| Telegram/c9dfVfFXnLiugId5JxKOwb7ZbNT33a6aiRFqYF542sKRhN3N...
CVE-2025-1390
The PAM module pamcap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to...
CVE-2024-57256
An integer overflow in ext4fsreadsymlink in Das U-Boot before 2025.01-rc1 occurs for zalloc adding one to an le32 variable via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite...
CVE-2025-1372
A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dumpdatasection/printstringsection of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to b...
CVE-2025-1373
A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function movreadtrak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The...
CVE-2025-25296
CVE-2025-25296 affects Label Studio versions prior to 1.16.0. The vulnerability is in the GET-based /projects/upload-example endpoint, where a crafted label_config permits injecting and rendering HTML without proper sanitization, enabling Cross-Site Scripting (XSS) . The CSP is in report-only mod...
BELL-CVE-2023-34440
Bulletin has no description...
CVE-2024-22910
Cross Site Scripting XSS vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code via a crafted payload...
CVE-2025-23421 Qardio iOS and Android applications Files or Directories Accessible to External Parties
An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and integrity of the hardware devices enabled by the Qardio iOS and Android applications...
CVE-2025-26519
creationtimestamp| type| source ---|---|--- 2025-02-13 17:44:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3li3ahbyuoi26 2025-02-13 17:54:51+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/113997859449174513 2025-02-13 17:55:12+00:00| seen|...
CVE-2025-21700
In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann was able to create a UAF which can be abused for privilege escalation with the following script Step 1. create root qdisc tc qdisc add dev lo...
GHSA-JFHM-PPQ8-7HGX
creationtimestamp| type| source ---|---|--- 2025-02-12 18:18:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113992291260057149...
CVE-2024-57952
creationtimestamp| type| source ---|---|--- 2025-02-12 14:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyeewjky62z 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2024-57952
In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for offset dir" The current directory offset allocator based on mtreealloccyclic stores the next offset value to return in octx-nextoffset. This mechanism typically returns values that...
BELL-CVE-2025-21691
Bulletin has no description...
CVE-2025-24897
Misskey CSRF vulnerability (CVE-2025-24897) affects Misskey versions 12.109.0 up to but not including 2025.2.0-alpha.0, due to CSRF protection gaps and insecure authentication cookie attributes in Bull dashboard. Some bull-board APIs can be driven into CSRF attacks, enabling potential manipulatio...
CVE-2025-21693
In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...
RHEL 8 : tbb (RHSA-2025:1214)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1214 advisory. Threading Building Blocks TBB is a C++ runtime library that abstracts the low-level threading details necessary for optimal multi-core performance...