↓ Skip to main content

Vulnerability

One CVE per post: what it hits, what fixes it, who exploits it.

November 2024

24

CVE-2024-0012 - PAN-OS management interface authentication bypass Vulnerability

24

CVE-2024-5910 - Palo Alto Expedition admin password reset Vulnerability

August 2024

17

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability Vulnerability

June 2024

16

CVE-2024-4577 - PHP CGI Argument Injection Vulnerability Vulnerability

2

CVE-2024-24919 - Check Point gateway path traversal file read Vulnerability

2

CVE-2024-2961 - glibc iconv overflow turns PHP file reads into RCE Vulnerability

2

CVE-2024-32002 - Recursive clones in git Vulnerability

April 2024

18

CVE-2024-3094 - Backdoor in XZ Vulnerability

18

CVE-2024-31497 - Biased ECDSA Nonces in PuTTY Client Vulnerability

December 2023

6

CVE-2023-39539 - LogoFAIL: UEFI boot logo parsers are exploitable Vulnerability

6

CVE-2022-1471 - Remote code execution in SnakeYAML Vulnerability

November 2023

9

CVE-2023-46747 - F5 BIG-IP Configuration utility unauthenticated RCE Vulnerability

9

CVE-2023-32530 - Trend Micro Apex Central SQL injection via certificates Vulnerability

9

CVE-2023-23583 - Reptar: a redundant REX prefix glitches Intel CPUs Vulnerability

October 2023

24

CVE-2023-4911 - Looney Tunables: glibc ld.so overflow to root Vulnerability

24

CVE-2023-4966 - Citrix Bleed leaks NetScaler session tokens Vulnerability

June 2023

1

CVE-2023-33248 - NUIT hides Alexa commands in near-ultrasound audio Vulnerability

1

CVE-2023-0386 - Privilege escalation exploit in OverlayFS Vulnerability

February 2023

17

CVE-2023-25136 - Pre-auth double free in OpenSSH 9.1 sshd Vulnerability

January 2023

20

CVE-2022-23521 - X41 audit finds critical heap overflows in Git Vulnerability

20

CVE-2023-22809 - sudoedit policy bypass allows editing any file Vulnerability

December 2022

23

CVE-2022-47939 - Unauthenticated kernel RCE in Linux ksmbd Vulnerability

3

CVE-2022-4262 - Chrome Type Confusion in V8 Vulnerability

November 2022

29

CVE-2022-3602 - Why fuzzing missed the OpenSSL punycode overflow Vulnerability

29

CVE-2022-41622 - F5 BIG-IP iControl SOAP CSRF and REST flaws Vulnerability