CVE-2022-48942

creationtimestamp| type| source ---|---|--- 2024-08-22 06:49:18+00:00| seen| https://t.me/cvedetector/3884...

CVE-2024-43785

creationtimestamp| type| source ---|---|--- 2024-08-22 06:01:40+00:00| published-proof-of-concept| https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-88g2-r9rw-g55h 2024-08-22 17:42:29+00:00| seen| https://t.me/cvedetector/3916...

CVE-2024-5583

creationtimestamp| type| source ---|---|--- 2024-08-22 05:59:06+00:00| seen| https://t.me/cvedetector/3875...

CVE-2022-48916

creationtimestamp| type| source ---|---|--- 2024-08-22 05:08:51+00:00| seen| https://t.me/cvedetector/3870...

CVE-2022-48908

creationtimestamp| type| source ---|---|--- 2024-08-22 05:08:50+00:00| seen| https://t.me/cvedetector/3869...

CVE-2022-48912

creationtimestamp| type| source ---|---|--- 2024-08-22 05:08:04+00:00| seen| https://t.me/cvedetector/3863...

CVE-2022-48914

creationtimestamp| type| source ---|---|--- 2024-08-22 05:08:03+00:00| seen| https://t.me/cvedetector/3861...

CVE-2022-48921

creationtimestamp| type| source ---|---|--- 2024-08-22 05:07:52+00:00| seen| https://t.me/cvedetector/3853...

CVE-2022-48925

creationtimestamp| type| source ---|---|--- 2024-08-22 05:07:51+00:00| seen| https://t.me/cvedetector/3851...

CVE-2024-7972

creationtimestamp| type| source ---|---|--- 2024-08-22 00:07:07+00:00| seen| https://t.me/cvedetector/3843...

CVE-2024-7969

creationtimestamp| type| source ---|---|--- 2024-08-22 00:07:02+00:00| seen| https://t.me/cvedetector/3840...

WordPress AcyMailing SMTP Newsletter Plugin <= 9.7.2 is vulnerable to Arbitrary File Upload

Software AcyMailing SMTP Newsletter Type Plugin Vulnerable versions = 9.7.2 Fixed in 9.8.0 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-7384 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 51ad1438d775 Credits Arkadiusz Hydzik Required...

REXML denial of service vulnerability

Impact The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML that has many deep elements that have same local name attributes. If you need to parse untrusted XMLs with tree parser API like REXML::Document.new, you may be impacted to this vulnerability. If you use other parser...

CVE-2024-42813

creationtimestamp| type| source ---|---|--- 2024-08-19 22:43:30+00:00| seen| https://t.me/cvedetector/3560...

Kibana 7.7.x < 7.17.23 / 8.0.x < 8.14.2 (ESA-2024-22)

The version of Kibana installed on the remote host is prior to 7.17.23 or 8.14.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2024-22 advisory. - A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector...

CVE-2024-6788

creationtimestamp| type| source ---|---|--- 2024-08-13 17:07:02+00:00| seen| https://t.me/cvedetector/3019...

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability CVE-2024-38213...

Fortinet Fortigate GUI Console WebSockets do not terminate on logout (FG-IR-22-445)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-445 advisory. - An insufficient session expiration vulnerability CWE-613 vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 al...

Open WebUI 0.1.105 File Upload / Path Traversal Vulnerabilities

Title: Open WebUI Arbitrary File Upload + Path Traversal Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-006.txt 1. Vulnerability Details Affected Vendor: Open WebUI Affected Product: Open WebUI Affected Version: 0.1.105 Platform: Debian 12 CWE Classification: CWE-22:...

Open WebUI 0.1.105 File Upload / Path Traversal

KL-001-2024-006: Open WebUI Arbitrary File Upload + Path Traversal Title: Open WebUI Arbitrary File Upload + Path Traversal Advisory ID: KL-001-2024-006 Publication Date: 2024.08.D06 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-006.txt 1. Vulnerability Details Affected...