|
51
|
9.8
-
|
CRITICAL
Network
|
In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first difference is spotted in the …
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2024-25714
|
cpe:2.3:o:debian:debian_linux:12.0:*
cpe:2.3:o:debian:debian_linux:11.0:*
|
|
|
|
|
2024-11-21 18:01
2024-02-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
52
|
7.5
-
|
HIGH
Network
|
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to …
|
-
|
CVE-2023-6536
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2024-11-21 17:44
2024-02-8
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
53
|
7.5
-
|
HIGH
Network
|
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to …
|
-
|
CVE-2023-6356
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2024-11-21 17:43
2024-02-8
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
54
|
5.3
-
|
MEDIUM
Adjacent
|
A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to…
|
CWE-362
Race Condition
|
CVE-2024-24858
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2025-02-14 03:17
2024-02-5
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
55
|
6.8
-
|
MEDIUM
Adjacent
|
A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth conn…
|
CWE-362
CWE-190
Race Condition
Integer Overflow or Wraparound
|
CVE-2024-24857
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2025-02-14 03:17
2024-02-5
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
56
|
7.8
-
|
HIGH
Local
|
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as …
|
CWE-416
Use After Free
|
CVE-2024-1086
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2024-11-21 17:49
2024-01-31
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
57
|
7.5
-
|
HIGH
Network
|
Transmit requests in Xen's virtual network protocol can consist of
multiple parts. While not really useful, except for the initial part
any of them may be of zero length, i.e. carry no data at all. …
|
CWE-476
NULL Pointer Dereference
|
CVE-2023-46838
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2024-11-21 17:29
2024-01-29
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
58
|
8.8
-
|
HIGH
Network
|
Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could…
|
NVD-CWE-noinfo
|
CVE-2024-0755
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2024-11-21 17:47
2024-01-23
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
59
|
6.5
-
|
MEDIUM
Network
|
In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
|
NVD-CWE-noinfo
|
CVE-2024-0753
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2024-11-21 17:47
2024-01-23
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
60
|
8.8
-
|
HIGH
Network
|
A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
|
CWE-269
Improper Privilege Management
|
CVE-2024-0751
|
cpe:2.3:o:debian:debian_linux:10.0:*
|
|
|
|
|
2024-11-21 17:47
2024-01-23
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|