CVE-2024-47688

In the Linux kernel, the following vulnerability has been resolved: driver core: Fix a potential null-ptr-deref in moduleadddriver Inject fault while probing of-fpga-region, if kasprintf fails in moduleadddriver, the second sysfsremovelink in exit path will cause null-ptr-deref as below because...

BELL-CVE-2024-8376

Bulletin has no description...

CVE-2024-46606

A cross-site scripting XSS vulnerability in the component /admin.php?page=photo of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field...

CVE-2024-8184

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote which can be exploited by unauthorized users to cause remote denial-of-service DoS attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory...

Adobe Commerce Information Disclosure Vulnerability (CNVD-2024-41459)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an information disclosure vulnerability that can be exploited by an attacker to cause a security feature bypass...

AUO DIR-605L formEasySetPassword Function Buffer Overflow Vulnerability

The AUO DIR-605L is a wireless router from China's AUO D-Link. The AUO DIR-605L suffers from a buffer overflow vulnerability, which originates from the curTime parameter of the formEasySetPassword function in the /goform/formEasySetPassword page that fails to correctly validate the length of the...

CVE-2024-48938

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process...

BELL-CVE-2024-47663

Bulletin has no description...

PT-2024-38010

Name of the Vulnerable Software and Affected Versions lollms-webui affected versions not specified lollms affected versions not specified Description A path traversal issue exists in the lollms file system.py file, specifically affecting the functions add rag database, toggle mount rag database,...

BELL-CVE-2024-43485

Bulletin has no description...

CVE-2024-43540

creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review...

CVE-2024-43513 BitLocker Security Feature Bypass Vulnerability

...

CVE-2024-31228

Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as KEYS, SCAN, PSUBSCRIBE, FUNCTION LIST, COMMAND LIST and ACL definitions. Matching of extremel...

CVE-2024-6443

In utf8trunc in zephyr/lib/utils/utf8.c, lastbytep can point to one byte before the string pointer if the string is empty...

[SECURITY] [DSA 5780-1] php8.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5780-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2024 https://www.debian.org/security/faq -...

BELL-CVE-2024-46812

Bulletin has no description...

CVE-2024-46802

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

CVE-2024-46828

In the Linux kernel, the following vulnerability has been resolved: sched: schcake: fix bulk flow accounting logic for host fairness In schcake, we keep track of the count of active bulk flows per host, when running in dst/src host fairness mode, which is used as the round-robin weight when...

SUSE SLES15 Security Update : kubernetes1.24 (SUSE-SU-2024:3458-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3458-1 advisory. - rebuild the package with the current go 1.23 security release bsc1229122. Tenable has extracted the preceding description block...

CVE-2024-8404

creationtimestamp| type| source ---|---|--- 2024-09-26 04:35:25+00:00| seen| https://t.me/cvedetector/6363 2025-05-13 02:29:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16073 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-420/ 2025-07-22 03:54:24+00:0...