Poster - CVE CyberSecurity Database News (Page 626)

Sep 3, 2024 Exploit Google Chrome

CVE-2024-7970: A Deep Dive Into the Out of Bounds Write in V8 Vulnerability in Google Chrome and How to Protect Yourself

CVE-2024-7970 is a security vulnerability found in Google Chrome's V8 JavaScript engine, affecting versions prior to 128..6613.119. It has been categorized

CVE-2024-4629 - How Attackers Can Bypass Brute Force Protection in Keycloak Using Timing Exploits

Sep 3, 2024 Exploit

CVE-2024-4629 - How Attackers Can Bypass Brute Force Protection in Keycloak Using Timing Exploits

*By [Your Name], June 2024* Introduction Recently, a serious security vulnerability was uncovered in Keycloak, a widely-used open-source identity and access management system. Cataloged as

CVE-2024-41436 - How a Buffer Overflow in ClickHouse v24.3.3.102 (DB::evaluateConstantExpressionImpl) Risks Your Data

Sep 3, 2024 API Exploit SQL

CVE-2024-41436 - How a Buffer Overflow in ClickHouse v24.3.3.102 (DB::evaluateConstantExpressionImpl) Risks Your Data

In early June 2024, a severe buffer overflow vulnerability—CVE-2024-41436—was uncovered in ClickHouse v24.3.3.102. The security hole exists in the DB:

Sep 3, 2024 Exploit

CVE-2024-6119 - How Certificate Name Checks in X.509 Certificates Can Crash Your TLS Client Applications

On June 2024, a new vulnerability tracked as CVE-2024-6119 was disclosed, affecting applications that perform certificate name checks during TLS connections using X.509 certificates.

Sep 3, 2024

CVE-2024-6232 - Exploiting a CPython Tarfile ReDoS Vulnerability

A fresh vulnerability tracked as CVE-2024-6232 reveals a medium severity flaw in CPython's tarfile module. If you use Python to process tar files,