CVE-2024-41678

creationtimestamp| type| source ---|---|--- 2024-11-15 18:28:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113488382438414219 2024-11-15 19:58:29+00:00| seen| https://t.me/cvedetector/11149...

CVE-2024-52510

creationtimestamp| type| source ---|---|--- 2024-11-15 17:57:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113488261461288267 2024-11-15 19:58:11+00:00| seen| https://t.me/cvedetector/11135...

Fedora 37 : kernel (2022-90162a1d88)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-90162a1d88 advisory. The 6.0.15 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

CVE-2024-50305

Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue...

PT-2024-8143 · Unknown +11 · Postgresql +10

Name of the Vulnerable Software and Affected Versions: PostgreSQL affected versions not specified Description: The issue is related to an inconsistency in the row security policy of PostgreSQL, allowing an attacker to potentially execute arbitrary commands by reusing a query in multiple SET ROLE...

Fedora 38 : cloudcompare (2022-d0be6938e2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-d0be6938e2 advisory. Automatic update for cloudcompare-2.11.3-4.fc38. Changelog Thu Aug 25 2022 Miro Hronok - 2.11.3-4 - Security fix for CVE-2021-21897 - Fixes: rhbz2080986...

Fedora 41 : php-tcpdf (2024-b00678c08a)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b00678c08a advisory. Version 6.7.7 2024-10-26 - Update regular expression to avoid ReDoS CVE-2024-22641 - PHP 8.4 Fix: Curl CURLOPTBINARYTRANSFER deprecated 675 - SVG detection f...

Fedora 41 : python-aiohttp (2024-c4a71dab58)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c4a71dab58 advisory. Automatic update for python-aiohttp-3.9.5-1.fc41. Changelog Fri Apr 19 2024 Benjamin A. Beasley - 3.9.5-1 - Update to 3.9.5 fix RHBZ2275991, fix CVE-2024-273...

Fedora 37 : python3.6 (2022-fbf6a320fe)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-fbf6a320fe advisory. Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder Tenable has extracted the preceding description block directly from the...

CVE-2024-28950

creationtimestamp| type| source ---|---|--- 2024-11-13 22:12:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113477941878570665...

Prototype Pollution

DOMPurify is vulnerable to Prototype Pollution. The vulnerability is due to insufficient sanitization, allowing attackers to manipulate the prototype of JavaScript objects, potentially leading to unexpected behavior or security issues...

Incorrect Security Setting

net.snowflake, snowflake-jdbc is vulnerable to an Incorrect Security Setting. The vulnerability is due to data being uploaded to an encrypted stage without client-side encryption, allowing unauthorized parties to access or modify sensitive information...

CVE-2024-37400

creationtimestamp| type| source ---|---|--- 2024-11-13 03:37:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113473554564683012 2024-11-13 04:07:18+00:00| seen| https://t.me/cvedetector/10772...

CVE-2024-37376

creationtimestamp| type| source ---|---|--- 2024-11-13 03:22:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113473495543964820 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1502/ 2024-11-13 09:12:33+00:00| seen|...

BELL-CVE-2024-50243

Bulletin has no description...

BELL-CVE-2024-50216

Bulletin has no description...

CVE-2024-50258

In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Config a small gsomaxsize/gsoipv4maxsize will lead to an underflow in skdstgsomaxsize, which may trigger a BUGON crash, because sk-skgsomaxsize would be much bigger than...

CVE-2024-50188

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmodesetbit with a bit mask 1 10 rather than a bit number 10. This corrupts some other memo...

CVE-2024-50202

In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfsfindentry Syzbot reported that a task hang occurs in vcsopen during a fuzzing test for nilfs2. The root cause of this problem is that in nilfsfindentry, which searches for directo...

CVE-2024-7982 Registrations for The Events Calendar < 2.12.4 - Unauthenticated Stored XSS

The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks...