CVE CyberSecurity Database News (Page 422)

Dec 29, 2024 Windows API

CVE-2018-25107 - The Hidden Danger in Crypt::Random::Source Perl Module’s Use of rand()

When building secure applications, especially those dealing with cryptography, generating truly random numbers is a cornerstone for safety. Sadly, even a slight mistake in this

Dec 28, 2024 API Apache

CVE-2024-56512 - Apache NiFi Security Flaw Lets Users Access Unauthorized Parameter Contexts and Services

A new vulnerability has been discovered in Apache NiFi (CVE-2024-56512) that allows authenticated users with permissions to create Process Groups to bypass security

Dec 28, 2024 API

CVE-2024-56703 - Linux Kernel IPv6 fib6_select_path Soft Lockup Vulnerability Explained

CVE-2024-56703 is a critical vulnerability that affected the Linux kernel’s IPv6 routing system. In certain high-load, dynamic environments—like edge routers

Dec 28, 2024 Exploit

CVE-2024-56707 - Critical Linux Kernel Patch for octeontx2-pf mbox Message Handling

--- Overview A serious flaw, CVE-2024-56707, was identified and fixed in the Linux kernel driver for Marvell's OcteonTX2 network interface card (NIC)

Dec 28, 2024

CVE-2024-56705 - Linux Kernel atomisp Memory Allocation Vulnerability Explained

In June 2024, a new vulnerability was assigned the identifier CVE-2024-56705. This vulnerability involves the memory allocation logic in the Linux kernel'