5371 matches found
CVE-2024-52806
SimpleSAMLphp SAML2 library is affected by an XXE when loading an untrusted XML document (e.g., SAMLResponse). The issue is tied to parsing XML in the library, and the vulnerability is fixed in versions 4.6.14 and 5.0.0-alpha.18. Affected component: SimpleSAMLphp SAML2; root cause: XXE during XML...
PT-2024-35456 · Unknown · Simplesamlphp Saml2 Library
Name of the Vulnerable Software and Affected Versions: SimpleSAMLphp SAML2 library versions prior to 4.6.14 SimpleSAMLphp SAML2 library versions prior to 5.0.0-alpha.18 Description: The SimpleSAMLphp SAML2 library is vulnerable to an XML External Entity XXE attack when loading untrusted XML...
What Graykey Can and Can’t Unlock
This is from 404 Media: The Graykey, a phone unlocking and forensics tool that is used by law enforcement around the world, is only able to retrieve partial data from all modern iPhones that run iOS 18 or iOS 18.0.1, which are two recently released versions of Apple's mobile operating system,...
CVE-2024-52583
creationtimestamp| type| source ---|---|--- 2024-11-18 23:14:38+00:00| seen| https://t.me/cvedetector/11389...
CVE-2024-10217
creationtimestamp| type| source ---|---|--- 2024-11-18 06:51:22+00:00| seen| https://t.me/CyberBulletin/26469 2024-11-18 06:51:22+00:00| seen| https://t.me/CyberBulletin/1496 2024-11-18 07:00:28+00:00| seen| https://t.me/InfoSecInsider/24508 2024-11-18 07:00:32+00:00| seen|...
CVE-2024-10218
creationtimestamp| type| source ---|---|--- 2024-11-18 06:51:22+00:00| seen| https://t.me/CyberBulletin/26469 2024-11-18 06:51:22+00:00| seen| https://t.me/CyberBulletin/1496 2024-11-18 07:00:28+00:00| seen| https://t.me/InfoSecInsider/24508 2024-11-18 07:00:32+00:00| seen|...
CVE-2024-52926
creationtimestamp| type| source ---|---|--- 2024-11-18 05:40:14+00:00| seen| https://t.me/cvedetector/11266...
WordPress Geolocator Plugin <= 1.1 is vulnerable to PHP Object Injection
Software Geolocator Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52443 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 70b8a65b2fb3 Credits LVT-tholv2k Required privilege Unauthenticated...
WordPress WP e-Commerce Style Email Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS)
Software WP e-Commerce Style Email Type Plugin Vulnerable versions = 0.6.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52462 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 22630f6609c8 Credits SOPROBRO Required...
WordPress GoQSmile Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
Software GoQSmile Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52455 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dbb042e2576e Credits Mika Required privilege Unauthenticated...
WordPress Awesome Studio Plugin <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)
Software Awesome Studio Type Plugin Vulnerable versions = 2.4.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52456 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 83cb8daf8eb9 Credits Le Ngoc Anh Required privilege...
WordPress WordPress GDPR & CCPA Plugin <= 2.0.2 is vulnerable to Broken Access Control
Software WordPress GDPR & CCPA Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-11069 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b71de0a7a1a1 Credits István Márton...
WordPress Backup and Staging by WP Time Capsule Plugin <= 1.22.21 is vulnerable to Arbitrary File Upload
Software Backup and Staging by WP Time Capsule Type Plugin Vulnerable versions = 1.22.21 Fixed in 1.22.22 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-8856 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 3a293a6ce154 Credits Rein Daelman...
WordPress Weather Atlas Widget Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)
Software Weather Atlas Widget Type Plugin Vulnerable versions = 3.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52472 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5504e62dc0b7 Credits LVT-tholv2k Required privileg...
CVE-2024-50649
creationtimestamp| type| source ---|---|--- 2024-11-15 18:17:19+00:00| seen| https://t.me/cvedetector/11101...
bpftrace security update
0.21.1-1 - Rebase on bpftrace 0.21.1 - Add LLVM 18 support RHEL-28685 0.20.4-3 - Fix latest build not built in side tag 0.20.4-2 - Rebuild for bcc 0.30.0-4 0.20.4-1 - Rebase on bpftrace 0.20.4 - Fix CVE allowing unprivileged users loading of compromised linux headers RHEL-28765, CVE-2024-2313 -...
bcc security update
0.30.0-6 - Rebuild with LLVM 18 RHEL-28684 0.30.0-5 - Drop python3-pyelftools dependency on s390x until it is available 0.30.0-4 - Exclude btrfs and f2fs libbpf tools RHEL-36579 0.30.0-3 - Really prevent the loading of compromised headers RHEL-28769, CVE-2024-2314 - Add python3-pyelftools...
llvm-toolset:rhel8 bug fix and enhancement update
An update is available for llvm-compat, lld, compiler-rt, module.lld, lldb, python-lit, module.python-lit, module.lldb, llvm, libomp, module.compiler-rt, clang, module.libomp, module.llvm-compat, module.llvm, module.clang. This update affects Rocky Linux 8. A Common Vulnerability Scoring System...
rust-toolset:rhel8 bug fix and enhancement update
An update is available for rust, module.rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rust Toolset provides the Rust programming language compiler rustc,...