|
941
|
6.5 |
MEDIUM
Network
|
haxx
|
libcurl
|
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an
ASN.1 Generalized Time field. If given an syntactically incorrect field, the
parser might end up using -1 for the length…
Update
|
CWE-125
Out-of-bounds Read
|
CVE-2024-7264
|
2024-10-31 05:35 |
2024-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
942
|
5.4 |
MEDIUM
Network
|
oretnom23
|
lost_and_found_information_system
|
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fields in the User Profile page.
Update
|
CWE-79
Cross-site Scripting
|
CVE-2024-37856
|
2024-10-31 05:35 |
2024-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
943
|
7.5 |
HIGH
Network
samsung
|
exynos_850_firmware
exynos_1080_firmware
exynos_2100_firmware
exynos_2200_firmware
exynos_1280_firmware
exynos_1380_firmware
exynos_1330_firmware
exynos_w930_firmware
|
A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, and Exynos W930 where they do not properly check …
Update
|
CWE-1284
Improper Validation of Specified Quantity in Input
|
CVE-2024-27360
|
2024-10-31 05:35 |
2024-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
944
|
4.3 |
MEDIUM
Network
|
mozilla
|
firefox
thunderbird
|
Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox …
Update
|
NVD-CWE-noinfo
|
CVE-2024-6610
|
2024-10-31 05:35 |
2024-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
945
|
- |
|
-
|
-
|
A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunde…
Update
|
-
|
CVE-2024-6601
|
2024-10-31 05:35 |
2024-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
946
|
6.5 |
MEDIUM
Network
|
openstack
|
nova
glance
cinder
|
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 …
Update
|
NVD-CWE-noinfo
|
CVE-2024-32498
|
2024-10-31 05:35 |
2024-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
947
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
PCI: of_property: Return error for int_map allocation failure
Return -ENOMEM from of_pci_prop_intr_map() if kcalloc() fails to pr…
Update
|
-
|
CVE-2024-34030
|
2024-10-31 05:35 |
2024-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
948
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: Avoid address calculations via out of bounds array indexing
Before request->channels[] can be used, request->n_cha…
Update
|
CWE-129
Improper Validation of Array Index
|
CVE-2024-38562
|
2024-10-31 05:35 |
2024-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
949
|
- |
|
-
|
-
|
Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings …
Update
|
-
|
CVE-2024-6055
|
2024-10-31 05:35 |
2024-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
950
|
5.5 |
MEDIUM
Local
|
apple
|
macos
iphone_os
ipados
watchos
|
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, watchOS 10.5, iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. A maliciously crafted email may be able t…
Update
|
NVD-CWE-noinfo
|
CVE-2024-23282
|
2024-10-31 05:35 |
2024-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
