2991
|
- |
|
-
|
-
|
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.4, visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2, …
|
-
|
CVE-2024-54478
|
2025-01-29 00:15 |
2025-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2992
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argum…
|
-
|
CVE-2017-20196
|
2025-01-29 00:15 |
2025-01-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2993
|
- |
|
-
|
-
|
An allocation-size-too-big bug in the component /imagebuf.cpp of OpenImageIO v3.1.0.0dev may cause a Denial of Service (DoS) when the program to requests to allocate too much space.
|
-
|
CVE-2024-55195
|
2025-01-29 00:15 |
2025-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2994
|
- |
|
-
|
-
|
A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert
|
-
|
CVE-2024-6351
|
2025-01-28 23:15 |
2025-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2995
|
4.7 |
MEDIUM
Network
|
-
|
-
|
A vulnerability, which was classified as critical, has been found in Pimcore customer-data-framework up to 4.2.0. Affected by this issue is some unknown functionality of the file /admin/customermanag…
|
CWE-89 CWE-74
SQL Injection Injection
|
CVE-2024-11956
|
2025-01-28 23:15 |
2025-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2996
|
- |
|
-
|
-
|
Improper Neutralization of Argument Delimiters in the TeamViewer_service.exe component of TeamViewer Clients prior version 15.62 for Windows allows an attacker with local unprivileged access on a Win…
|
-
|
CVE-2025-0065
|
2025-01-28 20:15 |
2025-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2997
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of s…
|
CWE-117
Improper Output Neutralization for Logs
|
CVE-2025-0754
|
2025-01-28 19:15 |
2025-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2998
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sa…
|
CWE-444
HTTP Request Smuggling
|
CVE-2025-0752
|
2025-01-28 19:15 |
2025-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2999
|
6.6 |
MEDIUM
Local
|
-
|
-
|
A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to u…
|
CWE-22
Path Traversal
|
CVE-2025-0750
|
2025-01-28 19:15 |
2025-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3000
|
5.5 |
MEDIUM
Local
|
-
|
-
|
A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, thr…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2025-0736
|
2025-01-28 18:15 |
2025-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|