CVE CyberSecurity Database News (Page 650)

CVE-2024-41436 - How a Buffer Overflow in ClickHouse v24.3.3.102 (DB::evaluateConstantExpressionImpl) Risks Your Data

Sep 3, 2024 API Exploit SQL

CVE-2024-41436 - How a Buffer Overflow in ClickHouse v24.3.3.102 (DB::evaluateConstantExpressionImpl) Risks Your Data

In early June 2024, a severe buffer overflow vulnerability—CVE-2024-41436—was uncovered in ClickHouse v24.3.3.102. The security hole exists in

Sep 3, 2024 Exploit

CVE-2024-6119 - How Certificate Name Checks in X.509 Certificates Can Crash Your TLS Client Applications

On June 2024, a new vulnerability tracked as CVE-2024-6119 was disclosed, affecting applications that perform certificate name checks during TLS connections using X.

Sep 3, 2024

CVE-2024-6232 - Exploiting a CPython Tarfile ReDoS Vulnerability

A fresh vulnerability tracked as CVE-2024-6232 reveals a medium severity flaw in CPython's tarfile module. If you use Python to process

Sep 3, 2024 RCE Exploit

CVE-2024-5412 - Buffer Overflow in Zyxel VMG8825-T50K (libclinkc) - Exploit Details, Code, and Analysis

In June 2024, a new security flaw surfaced under the identifier CVE-2024-5412. This buffer overflow vulnerability affects the Zyxel VMG8825-T50K router, specifically

Sep 3, 2024 Exploit

CVE-2024-42057 - Command Injection in Zyxel Firewall VPNs—How Attackers Break In and What You Need to Know

CVE-2024-42057 is a recently disclosed command injection vulnerability that targets popular Zyxel firewall products, making thousands of small businesses and organizations potentially exposed