Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2023-3750	Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service Description: A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon. EPSS Score: 0.07% Source: CVE December 4th, 2024 (6 months ago)
CVE-2023-3106	Kernel: netlink socket crash (null pointer deref) in netlink_dump function Description: A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely. EPSS Score: 0.04% Source: CVE December 4th, 2024 (6 months ago)
CVE-2023-3019	Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() Description: A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. EPSS Score: 0.05% Source: CVE December 4th, 2024 (6 months ago)
CVE-2023-25584	Out of bounds read in parse_module function in bfd/vms-alpha.c Description: An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils. EPSS Score: 0.06% Source: CVE December 4th, 2024 (6 months ago)
	Misconfigured WAFs Heighten DoS, Breach Risks Description: Organizations that rely on their content delivery network provider for Web application firewall services may be inadvertently leaving themselves open to attack. Source: Dark Reading December 3rd, 2024 (6 months ago)
	Vodka maker Stoli files for bankruptcy in US after ransomware attack Description: Stoli Group's U.S. companies have filed for bankruptcy following an August ransomware attack and Russian authorities seizing the company's remaining distilleries in the country. [...] Source: BleepingComputer December 3rd, 2024 (6 months ago)
	Cloudflare’s developer domains increasingly abused by threat actors Description: Cloudflare's 'pages.dev' and 'workers.dev' domains, used for deploying web pages and facilitating serverless computing, are being increasingly abused by cybercriminals for phishing and other malicious activities. [...] Source: BleepingComputer December 3rd, 2024 (6 months ago)
	[github.com/kolide/launcher] Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) Description: An implementation bug in the Kolide Agent (known as launcher) allows for local privilege escalation to the SYSTEM user on Windows 10 and 11. Impacted versions include versions >= 1.5.3 and the fix has been released in 1.12.3. The bug was introduced in version 1.5.3 when launcher started storing upgraded binaries in the ProgramData directory (#1510). This move to the new directory meant the launcher root directory inherited default permissions that are not as strict as the previous location. These incorrect default permissions in conjunction with an omitted SystemDrive environmental variable (when launcher starts osqueryd), allows a malicious actor with access to the local Windows device to successfully place an arbitrary DLL into the osqueryd process's search path. Under some circumstances, this DLL will be executed when osqueryd performs a WMI query. This combination of events could then allow the attacker to escalate their privileges to SYSTEM. This issue was found by Bryan Alexander of Atredis Partners and responsibly reported through the Kolide bug bounty program. Kolide made the appropriate changes and released a fix in version 1.12.3 of the launcher package. References https://github.com/kolide/launcher/security/advisories/GHSA-66q9-2rvx-qfj5 https://github.com/kolide/launcher/pull/1510 https://github.com/advisories/GHSA-66q9-2rvx-qfj5 Source: Github Advisory Database (Go) December 3rd, 2024 (6 months ago)
	Decade-Old Cisco Vulnerability Under Active Exploit Description: Cisco encourages users to update to an unaffected version of its Adaptive Security Appliance (ASA) software since there are no workarounds for the 2014 vulnerability. Source: Dark Reading December 3rd, 2024 (6 months ago)
	US shares tips to block hackers behind recent telecom breaches Description: CISA released guidance today to help network defenders harden their systems against attacks coordinated by the Salt Typhoon Chinese threat group that breached multiple major global telecommunications providers earlier this year. [...] Source: BleepingComputer December 3rd, 2024 (6 months ago)