4542 matches found
CVE-2024-57937
creationtimestamp| type| source ---|---|--- 2025-01-21 12:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatg6kq4h2j 2025-01-21 12:59:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgavtaylgh2b 2025-01-21 13:36:54+00:00| seen|...
KLA79208 Multiple vulnerabilities in Oracle Java
Multiple vulnerabilities were found in Oracle Java. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability can be exploited remotely to execut...
CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21
CVE-2016-1000104 affecting package modfcgid 2.3.9-21. No patch is available currently...
CVE-2023-20740
creationtimestamp| type| source ---|---|--- 2025-01-07 21:37:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/571...
PT-2025-42963
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25 Oracle GraalVM for JDK versions 17.0.16 and 21.0.8 Oracle GraalVM Enterprise Edition version 21.3.15 Description An issue exists in the Oracle Java SE, Oracle GraalVM for...
BIT-NODE-MIN-2024-22017
setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...
CVE-2022-0529 affecting package unzip for versions less than 6.0-21
CVE-2022-0529 affecting package unzip for versions less than 6.0-21. A patched version of the package is available...
CVE-2024-42450
creationtimestamp| type| source ---|---|--- 2024-11-21 11:23:38+00:00| seen| https://t.me/CyberBulletin/26535 2024-11-21 11:23:38+00:00| seen| https://t.me/CyberBulletin/1557...
CVE-2024-11541
creationtimestamp| type| source ---|---|--- 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1552/...
CVE-2024-11578
creationtimestamp| type| source ---|---|--- 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1609/...
WordPress ForumEngine Theme <= 1.8 is vulnerable to Cross Site Scripting (XSS)
Software ForumEngine Type Theme Vulnerable versions = 1.8 Fixed in 1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10623 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4119169dab6d Credits rajanhoyr Required privile...
WordPress Button Block Plugin <= 1.1.4 is vulnerable to Broken Authentication
Software Button Block Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-10671 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID ae07da220d1c Credits...
WordPress WPFunnels Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)
Software WPFunnels Type Plugin Vulnerable versions = 3.5.5 Fixed in 3.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10792 Patch priority Medium CVSS severity Medium 7.1 Developer WPFunnels Team PSID b1c17399226b Credits Nathan calysteon Require...
WordPress Dino Game Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
Software Dino Game Type Plugin Vulnerable versions = 1.1.0 Fixed in 1.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11388 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3063a938b1ce Credits SOPROBRO Required privilege...
WordPress Tutor LMS Plugin <= 2.7.6 is vulnerable to Broken Access Control
Software Tutor LMS Type Plugin Vulnerable versions = 2.7.6 Fixed in 2.7.7 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Access Control CVE CVE-2024-10393 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 196d31d95c65 Credits 1337Wannabe...
WordPress System Dashboard Plugin < 2.8.15 is vulnerable to Cross Site Scripting (XSS)
Software System Dashboard Type Plugin Vulnerable versions 2.8.15 Fixed in 2.8.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11107 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 948953d35f1c Credits Dogus Demirkiran...
Ubuntu: Security Advisory (USN-7099-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2024:3954-1 Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: - Update to upstream tag jdk-21.0.5+13 October 2024 CPU Security fixes + JDK-8307383: Enhance DTLS connections + JDK-8311208: Improve CDS Support + JDK-8328286, CVE-2024-21208, bsc1231702: Enhance HTTP client + JDK-8328544, CVE-2024-2121...