CVE-2024-11094

creationtimestamp| type| source ---|---|--- 2024-11-16 09:40:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113491970843217453 2024-11-16 11:53:19+00:00| seen| https://t.me/cvedetector/11230...

CVE-2024-11118

CVE-2024-11118 affects the WordPress 404 Error Monitor plugin up to version 1.1. It is a CSRF vulnerability caused by missing nonce validation in updatePluginSettings(), enabling unauthenticated attackers to forge requests that modify plugin settings and clear error logs if a site admin clicks a ...

CVE-2024-41678

creationtimestamp| type| source ---|---|--- 2024-11-15 18:28:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113488382438414219 2024-11-15 19:58:29+00:00| seen| https://t.me/cvedetector/11149...

CVE-2024-52510

creationtimestamp| type| source ---|---|--- 2024-11-15 17:57:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113488261461288267 2024-11-15 19:58:11+00:00| seen| https://t.me/cvedetector/11135 2026-09-05 13:00:05+00:00| published-proof-of-concept|...

Fedora 37 : kernel (2022-90162a1d88)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-90162a1d88 advisory. The 6.0.15 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

CVE-2024-50305

Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue...

Fedora 37 : python3.6 (2022-fbf6a320fe)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-fbf6a320fe advisory. Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder Tenable has extracted the preceding description block directly from the...

Fedora 41 : php-tcpdf (2024-b00678c08a)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b00678c08a advisory. Version 6.7.7 2024-10-26 - Update regular expression to avoid ReDoS CVE-2024-22641 - PHP 8.4 Fix: Curl CURLOPTBINARYTRANSFER deprecated 675 - SVG detection f...

Fedora 41 : python-aiohttp (2024-c4a71dab58)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c4a71dab58 advisory. Automatic update for python-aiohttp-3.9.5-1.fc41. Changelog Fri Apr 19 2024 Benjamin A. Beasley - 3.9.5-1 - Update to 3.9.5 fix RHBZ2275991, fix CVE-2024-273...

Fedora 38 : cloudcompare (2022-d0be6938e2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-d0be6938e2 advisory. Automatic update for cloudcompare-2.11.3-4.fc38. Changelog Thu Aug 25 2022 Miro Hronok - 2.11.3-4 - Security fix for CVE-2021-21897 - Fixes: rhbz2080986...

PT-2024-8143

Name of the Vulnerable Software and Affected Versions: PostgreSQL affected versions not specified Description: The issue is related to an inconsistency in the row security policy of PostgreSQL, allowing an attacker to potentially execute arbitrary commands by reusing a query in multiple SET ROLE...

CVE-2024-28950

creationtimestamp| type| source ---|---|--- 2024-11-13 22:12:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113477941878570665...

Prototype Pollution

DOMPurify is vulnerable to Prototype Pollution. The vulnerability is due to insufficient sanitization, allowing attackers to manipulate the prototype of JavaScript objects, potentially leading to unexpected behavior or security issues...

Incorrect Security Setting

net.snowflake, snowflake-jdbc is vulnerable to an Incorrect Security Setting. The vulnerability is due to data being uploaded to an encrypted stage without client-side encryption, allowing unauthorized parties to access or modify sensitive information...

CVE-2024-37400

creationtimestamp| type| source ---|---|--- 2024-11-13 03:37:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113473554564683012 2024-11-13 04:07:18+00:00| seen| https://t.me/cvedetector/10772...

CVE-2024-37376

creationtimestamp| type| source ---|---|--- 2024-11-13 03:22:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113473495543964820 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1502/ 2024-11-13 09:12:33+00:00| seen|...

BELL-CVE-2024-50243

Bulletin has no description...

BELL-CVE-2024-50216

Bulletin has no description...

CVE-2024-50258

In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Config a small gsomaxsize/gsoipv4maxsize will lead to an underflow in skdstgsomaxsize, which may trigger a BUGON crash, because sk-skgsomaxsize would be much bigger than...

CVE-2024-50188

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmodesetbit with a bit mask 1 10 rather than a bit number 10. This corrupts some other memo...