CVE-2024-3846
- EPSS 0.88%
- Veröffentlicht 17.04.2024 08:15:10
- Zuletzt bearbeitet 19.12.2024 15:15:21
Inappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2024-3847
- EPSS 0.13%
- Veröffentlicht 17.04.2024 08:15:10
- Zuletzt bearbeitet 19.12.2024 15:08:38
Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2024-21096
- EPSS 0.12%
- Veröffentlicht 16.04.2024 22:15:30
- Zuletzt bearbeitet 06.12.2024 21:35:01
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon t...
CVE-2022-24809
- EPSS 0.14%
- Veröffentlicht 16.04.2024 20:15:09
- Zuletzt bearbeitet 17.01.2025 16:17:30
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the `nsVacmAccessTable` to cause a NULL pointer dereference. Vers...
CVE-2022-24810
- EPSS 0.16%
- Veröffentlicht 16.04.2024 20:15:09
- Zuletzt bearbeitet 11.02.2025 21:56:27
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a SET to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9....
CVE-2022-24806
- EPSS 0.14%
- Veröffentlicht 16.04.2024 20:15:08
- Zuletzt bearbeitet 17.01.2025 16:09:56
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subag...
CVE-2022-24807
- EPSS 0.5%
- Veröffentlicht 16.04.2024 20:15:08
- Zuletzt bearbeitet 17.01.2025 16:15:01
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to `SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable` can cause an out-of-bounds memory access. A user with read-writ...
CVE-2022-24808
- EPSS 0.2%
- Veröffentlicht 16.04.2024 20:15:08
- Zuletzt bearbeitet 17.01.2025 16:16:28
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a `SET` request to `NET-SNMP-AGENT-MIB::nsLogTable` to cause a NULL pointer dere...
CVE-2022-24805
- EPSS 0.48%
- Veröffentlicht 16.04.2024 20:15:07
- Zuletzt bearbeitet 17.01.2025 16:04:56
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the `INDEX` of `NET-SNMP-VACM-MIB` can cause an out-of-bounds memory access. A user with read...
CVE-2024-31497
- EPSS 19.22%
- Veröffentlicht 15.04.2024 20:15:11
- Zuletzt bearbeitet 04.11.2025 22:16:00
In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. This is especially important in a scenario where an adversary is abl...