Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-36263 State: PUBLISHED Published: 2024-06-12T14:05:00.096Z Last Updated: 2025-02-13T17:52:52.302Z Vendors: Apache Software Foundation Products: Apache Submarine Server Core Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no long
ive or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/submarine/pull/1121 - https://lists.apache.org/thread/8q9kbdg9gk9kpz5p8x6t7q8709l3vrmt - http://www.openwall.com/lists/oss-security/2024/06/12/1
CVE ID: CVE-2024-36264 State: PUBLISHED Published: 2024-06-12T14:06:31.545Z Last Updated: 2025-03-20T19:07:12.124Z Vendors: Apache Software Foundation Products: Apache Submarine Commons Utils Problem Types: CWE-287 Description: ** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine Commons Utils. If the user doesn't explicitly set `submarine.auth.default.secret`, a default value will be used. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerabil
Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/submarine/pull/1125 - https://lists.apache.org/thread/7mo0c7vbhpo8thvybl8wwvb0bccrg7r4
CVE ID: CVE-2024-36265 State: PUBLISHED Published: 2024-06-12T14:12:11.078Z Last Updated: 2025-03-19T20:10:34.291Z Vendors: Apache Software Foundation Products: Apache Submarine Server Core Problem Types: CWE-863 Description: ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CI
This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/prckhhst19qxof064hsm8cccxtofvflz - http://www.openwall.com/lists/oss-security/2024/06/12/3
CVE ID: CVE-2024-36266 State: PUBLISHED Published: 2024-06-11T11:15:59.201Z Last Updated: 2024-08-02T03:37:04.767Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Siemens Products: PowerSys Problem Types: CWE-287 Description: A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-02
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-024584.html
CVE ID: CVE-2024-36267 State: PUBLISHED Published: 2024-05-30T05:33:45.258Z Last Updated: 2024-08-02T03:37:04.600Z Vendors: Kontron Products: Redmine DMSF Plugin Problem Types: Path traversal Description: Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited, a logged-in user may obtain or delete arbitrary files on the server (within the privilege of the Redmine process). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/danmunn/redmine_dmsf - https://jvn.jp/en/jp/JVN22182715/
CVE ID: CVE-2024-36268 State: PUBLISHED Published: 2024-08-02T09:44:26.237Z Last Updated: 2024-08-22T19:40:19.635Z Vendors: Apache Software Foundation Products: Apache InLong TubeMQ Client Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong. This issue affects Apache InLong: from 1.10.0 through 1.12.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.13.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/10251 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/1w1yp1bg5sjvn46dszkf00tz
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/1w1yp1bg5sjvn46dszkf00tz1vfs0frc
CVE ID: CVE-2024-36270 State: PUBLISHED Published: 2024-06-21T10:18:07.026Z Last Updated: 2025-05-04T09:11:00.764Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [..] RIP: 0010:nf_tproxy_laddr4+0xb7/0x340 net/ipv4/netfilter/nf_tproxy_ipv4.c:62 Call Trace: nft_tproxy_eval_v4 net/netfilter/nft_tproxy.c:56 [inline] nft_tproxy_eval+0xa9a/0x1a00 net/netfilter/nft_tproxy.c
Trace: nft_tproxy_eval_v4 net/netfilter/nft_tproxy.c:56 [inline] nft_tproxy_eval+0xa9a/0x1a00 net/netfilter/nft_tproxy.c:168 __in_dev_get_rcu() can return NULL, so check for this. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/10f0af5234dafd03d2b75233428ec3f11cf7e43d - https://git.kernel.org/stable/c/07eeedafc59c45fe5de43958128542be3784764c - https://git.kernel.org/stable/c/6fe5af4ff06db3d4d80e07a19356640428159f03 - https://git.kernel.org/stable/c/caf3a8afb5ea00db6d5398adf148d5534615fd80 - https://git.kernel.org/stable/c/570b4c52096e62fda562448f5760fd0ff06110f0 - https://git.kernel.org/stable/c/819bfeca16eb9ad647ddcae
t.kernel.org/stable/c/570b4c52096e62fda562448f5760fd0ff06110f0 - https://git.kernel.org/stable/c/819bfeca16eb9ad647ddcae25e7e12c30612147c - https://git.kernel.org/stable/c/21a673bddc8fd4873c370caf9ae70ffc6d47e8d3
CVE ID: CVE-2024-36272 State: PUBLISHED Published: 2025-01-14T14:21:05.930Z Last Updated: 2025-01-14T16:03:47.353Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2045
CVE ID: CVE-2024-36274 State: PUBLISHED Published: 2025-02-12T21:19:11.420Z Last Updated: 2025-02-13T20:18:16.964Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Pack Problem Types: Denial of Service, CWE-787 Description: Out-of-bounds write in the Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Pack before versions 29.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/
s. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01144.html
CVE ID: CVE-2024-36275 State: PUBLISHED Published: 2024-11-13T21:11:43.765Z Last Updated: 2024-11-14T19:38:46.361Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: n/a Products: Intel(R) Optane(TM) PMem Management software versions Problem Types: denial of service, CWE-395 Description: NULL pointer dereference in some Intel(R) Optane(TM) PMem Management software versions before CR_MGMT_02.00.00.4040, CR_MGMT_03.00.00.0499 may allow a authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01189.html
CVE ID: CVE-2024-36276 State: PUBLISHED Published: 2024-11-13T21:11:32.356Z Last Updated: 2024-11-14T19:39:54.310Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) CIP software Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions for some Intel(R) CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01182.html
CVE ID: CVE-2024-36277 State: PUBLISHED Published: 2024-06-17T07:33:55.100Z Last Updated: 2024-08-02T03:37:05.045Z Vendors: FreeFrom K.K. Products: "FreeFrom - the nostr client" App for Android, "FreeFrom - the nostr client" App for iOS Problem Types: Improper Verification of Cryptographic Signature Description: Improper verification of cryptographic signature issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. The affected app cannot detect event data with invalid signatures. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://freefrom.space/ - https://play.google.com/store/apps/details?id=com.freefrom
E Program Container: References: - https://freefrom.space/ - https://play.google.com/store/apps/details?id=com.freefrom - https://apps.apple.com/us/app/freefrom-the-nostr-client/id6446819930 - https://jvn.jp/en/jp/JVN55045256/
CVE ID: CVE-2024-36278 State: PUBLISHED Published: 2024-07-02T08:13:50.234Z Last Updated: 2024-08-02T03:37:04.690Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-843 Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-07.md
CVE ID: CVE-2024-36279 State: PUBLISHED Published: 2024-06-17T07:34:09.553Z Last Updated: 2024-08-02T03:37:05.263Z Vendors: FreeFrom K.K. Products: "FreeFrom - the nostr client" App for Android, "FreeFrom - the nostr client" App for iOS Problem Types: Reliance on obfuscation or encryption of security-relevant inputs without integrity checking Description: Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack. Additional Analys
, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://freefrom.space/ - https://play.google.com/store/apps/details?id=com.freefrom - https://apps.apple.com/us/app/freefrom-the-nostr-client/id6446819930 - https://jvn.jp/en/jp/JVN55045256/
CVE ID: CVE-2024-36280 State: PUBLISHED Published: 2025-02-12T21:19:47.875Z Last Updated: 2025-02-18T19:55:48.938Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) High Level Synthesis Compiler software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01214.html
CVE ID: CVE-2024-36281 State: PUBLISHED Published: 2024-06-21T10:18:07.695Z Last Updated: 2025-05-04T09:11:02.138Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules rx_create no longer allocates a modify_hdr instance that needs to be cleaned up. The mlx5_modify_header_dealloc call will lead to a NULL pointer dereference. A leak in the rules also previously occurred since there are now two rules populated related to status. BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - no
L pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 109907067 P4D 109907067 PUD 116890067 PMD 0 Oops: 0000 [#1] SMP CPU: 1 PID: 484 Comm: ip Not tainted 6.9.0-rc2-rrameshbabu+ #254 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS Arch Linux 1.16.3-1-1 04/01/2014 RIP: 0010:mlx5_modify_header_dealloc+0xd/0x70 <snip> Call Trace: <TASK> ? show_regs+0x60/0x70 ? __die+0x24/0x70 ? page_fault_oops+0x15f/0x430 ? free_to_partial_list.constprop.0+0x79/0x150 ? do_user_addr_fault+0x2c9/0x5c0 ? exc_page_fault+0x63/0x110 ? asm_exc_page_fault+0x27/0x30 ? mlx5_modify_header_dealloc+0xd/0x70 rx_create+0x374/0x590 rx
exc_page_fault+0x63/0x110 ? asm_exc_page_fault+0x27/0x30 ? mlx5_modify_header_dealloc+0xd/0x70 rx_create+0x374/0x590 rx_add_rule+0x3ad/0x500 ? rx_add_rule+0x3ad/0x500 ? mlx5_cmd_exec+0x2c/0x40 ? mlx5_create_ipsec_obj+0xd6/0x200 mlx5e_accel_ipsec_fs_add_rule+0x31/0xf0 mlx5e_xfrm_add_state+0x426/0xc00 <snip> Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b0a15cde37a8388e57573686f650a17208ae1212 - https://git.kernel.org/stable/c/cc9ac559f2e21894c21ac5b0c85fb24a5cab266c - https://git.kernel.org/stable/c/16d66a4fa81da07bc4ed19f4e53b87263c2f8d38
CVE ID: CVE-2024-36282 State: PUBLISHED Published: 2024-11-13T21:11:35.809Z Last Updated: 2024-11-14T19:39:30.651Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server Board S2600ST Family BIOS and Firmware Update software Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01183.html
CVE ID: CVE-2024-36283 State: PUBLISHED Published: 2025-02-12T21:19:55.715Z Last Updated: 2025-02-18T19:55:09.217Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Thread Director Visualizer software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for the Intel(R) Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01232.html
CVE ID: CVE-2024-36284 State: PUBLISHED Published: 2024-11-13T21:12:10.443Z Last Updated: 2024-11-13T21:22:08.034Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Neural Compressor software Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01219.html
CVE ID: CVE-2024-36285 State: PUBLISHED Published: 2025-02-12T21:20:09.346Z Last Updated: 2025-02-13T19:44:24.163Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software for Windows Problem Types: Denial of Service, CWE-362 Description: Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01224.html
CVE ID: CVE-2024-36286 State: PUBLISHED Published: 2024-06-21T10:18:08.364Z Last Updated: 2025-11-04T17:21:08.764Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() syzbot reported that nf_reinject() could be called without rcu_read_lock() : WARNING: suspicious RCU usage 6.9.0-rc7-syzkaller-02060-g5c1672705a1a #0 Not tainted net/netfilter/nfnetlink_queue.c:263 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 2 locks held by syz-executor.4/13427: #0: ffffffff8e334f60 (rcu_callbac
this: rcu_scheduler_active = 2, debug_locks = 1 2 locks held by syz-executor.4/13427: #0: ffffffff8e334f60 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e334f60 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2190 [inline] #0: ffffffff8e334f60 (rcu_callback){....}-{0:0}, at: rcu_core+0xa86/0x1830 kernel/rcu/tree.c:2471 #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline] #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: nfqnl_flush net/netfilter/nfnetlink_queue.c:405 [inline] #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: instance_destroy_rcu+0x30/0x220 net/netfilter
k_queue.c:405 [inline] #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: instance_destroy_rcu+0x30/0x220 net/netfilter/nfnetlink_queue.c:172 stack backtrace: CPU: 0 PID: 13427 Comm: syz-executor.4 Not tainted 6.9.0-rc7-syzkaller-02060-g5c1672705a1a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Call Trace: <IRQ> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712 nf_reinject net/netfilter/nfnetlink_queue.c:323 [inline] nfqnl_reinject+0x6ec/0x1120 net/netfilter/nfnetlink_queue.c:397 nfqnl_flush net/netfilter/nfnetlink_queue.c:410 [inline] insta
reinject+0x6ec/0x1120 net/netfilter/nfnetlink_queue.c:397 nfqnl_flush net/netfilter/nfnetlink_queue.c:410 [inline] instance_destroy_rcu+0x1ae/0x220 net/netfilter/nfnetlink_queue.c:172 rcu_do_batch kernel/rcu/tree.c:2196 [inline] rcu_core+0xafd/0x1830 kernel/rcu/tree.c:2471 handle_softirqs+0x2d6/0x990 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 </IRQ> <TASK> Additional Analyst Notes: - CVE Progra
vec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 </IRQ> <TASK> Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8658bd777cbfcb0c13df23d0ea120e70517761b9 - https://git.kernel.org/stable/c/3989b817857f4890fab9379221a9d3f52bf5c256 - https://git.kernel.org/stable/c/e01065b339e323b3dfa1be217fd89e9b3208b0ab - https://git.kernel.org/stable/c/25ea5377e3d2921a0f96ae2551f5ab1b36825dd4 - https://git.kernel.org/stable/c/68f40354a3851df46c27be96b84f11ae193e36c5 - https://git.kernel.org/stable/c/8f365564af898819a523f1a8cf5c6ce053e9f718 - https://git.kernel.org/stable/c/215df6490e208bfdd5b3012f5075e7f8736f3e7a - htt
f365564af898819a523f1a8cf5c6ce053e9f718 - https://git.kernel.org/stable/c/215df6490e208bfdd5b3012f5075e7f8736f3e7a - https://git.kernel.org/stable/c/dc21c6cc3d6986d938efbf95de62473982c98dec
CVE ID: CVE-2024-36287 State: PUBLISHED Published: 2024-06-14T08:39:08.132Z Last Updated: 2024-08-02T03:37:03.683Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-693 Description: Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-36288 State: PUBLISHED Published: 2024-06-21T11:18:46.152Z Last Updated: 2025-11-04T17:21:10.146Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gss_free_in_token_pages() The in_token->pages[] array is not NULL terminated. This results in the following KASAN splat: KASAN: maybe wild-memory-access in range [0x04a2013400000008-0x04a201340000000f] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/57ff6c0a175930856213b2aa39f8c845a53e5b1c - https://git.kernel.org/stable/c/6ed45d20d30005bed94c8c527ce51d5a
org/stable/c/57ff6c0a175930856213b2aa39f8c845a53e5b1c - https://git.kernel.org/stable/c/6ed45d20d30005bed94c8c527ce51d5ad8121018 - https://git.kernel.org/stable/c/4cefcd0af7458bdeff56a9d8dfc6868ce23d128a - https://git.kernel.org/stable/c/b4878ea99f2b40ef1925720b1b4ca7f4af1ba785 - https://git.kernel.org/stable/c/af628d43a822b78ad8d4a58d8259f8bf8bc71115 - https://git.kernel.org/stable/c/0a1cb0c6102bb4fd310243588d39461da49497ad - https://git.kernel.org/stable/c/4a77c3dead97339478c7422eb07bf4bf63577008
CVE ID: CVE-2024-36289 State: PUBLISHED Published: 2024-06-17T07:34:25.793Z Last Updated: 2024-08-02T03:37:05.005Z Vendors: FreeFrom K.K. Products: "FreeFrom - the nostr client" App for Android, "FreeFrom - the nostr client" App for iOS Problem Types: Reusing a nonce, key pair in encryption Description: Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://freefrom.space/ - https:/
itional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://freefrom.space/ - https://play.google.com/store/apps/details?id=com.freefrom - https://apps.apple.com/us/app/freefrom-the-nostr-client/id6446819930 - https://jvn.jp/en/jp/JVN55045256/