🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
‼️CVE-2024-0208‼️

GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2024-0209‼️

IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2024-0210‼️

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2024-0211‼️

DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-38674‼️

FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-38675‼️

FPE in paddle.linalg.matrixrank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-38676‼️

Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-38677‼️

FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-38678‼️

OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-50921‼️

An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the adduser interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300NV2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52302‼️

Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52303‼️

Nullptr in paddle.putalongaxis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52304‼️

Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52305‼️

FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52306‼️

FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52307‼️

Stack overflow in paddle.linalg.luunpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52308‼️

FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52309‼️

Heap buffer overflow in paddle.repeatinterleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52310‼️

PaddlePaddle before 2.6.0 has a command injection in getonlinepassinterval. This resulted in the ability to execute arbitrary commands on the operating system.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52311‼️

PaddlePaddle before 2.6.0 has a command injection in wgetdownload. This resulted in the ability to execute arbitrary commands on the operating system.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-52312‼️

Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

📖 Read more

Via "National Vulnerability Database"