CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/09/2024 |
| CVE-2024-20085 | MOYENNE4.4 | In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944204; Issue ID: MSV-1560. | 02/09/2024 |
| CVE-2024-20084 | MOYENNE4.4 | In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944210; Issue ID: MSV-1561. | 02/09/2024 |
| CVE-2024-22278 | MOYENNE4.3 | Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations. | 02/08/2024 |
| CVE-2024-20081 | MOYENNE6.7 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08719602; Issue ID: MSV-1412. | 01/07/2024 |
| CVE-2024-20080 | CRITIQUE9.8 | In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08720039; Issue ID: MSV-1424. | 01/07/2024 |
| CVE-2024-22261 | MOYENNE5.5 | SQL-Injection in Harbor allows priviledge users to leak the task IDs | 11/06/2024 |
| CVE-2024-22244 | MOYENNE6.1 | Open Redirect in Harbor <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site. | 10/06/2024 |
| CVE-2024-5187 | ÉLEVÉE8.8 | A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability enables attackers to overwrite any file on the system, potentially leading to | 06/06/2024 |
| CVE-2023-32871 | MOYENNE5.3 | In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355514; Issue ID: ALPS08355514. | 06/05/2024 |
| CVE-2024-34043 | MOYENNE5.3 | O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message. | 30/04/2024 |
| CVE-2023-52728 | MOYENNE5.5 | Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString. | 30/04/2024 |
| CVE-2023-52727 | ÉLEVÉE8.1 | Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits. | 30/04/2024 |
| CVE-2023-52726 | MOYENNE6.5 | Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe function implementation for the subscribed indication stream). | 30/04/2024 |
| CVE-2023-52725 | MOYENNE6.5 | Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package. | 30/04/2024 |
| CVE-2023-52724 | ÉLEVÉE8.1 | Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function. | 30/04/2024 |
| CVE-2024-31584 | MOYENNE5.5 | Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp. | 19/04/2024 |
| CVE-2024-31583 | ÉLEVÉE7.8 | Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp. | 17/04/2024 |