Lucene search
K

28 matches found

Tenable Nessus
Tenable Nessus
added 3 days ago4 views

RHEL 8 : firefox (RHSA-2026:24755)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:24755 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

9.8CVSS5.6AI score0.00024EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-24755

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00185EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 11:59 a.m.5 views

CVE-2025-24755

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Stored XSS.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 4.6.0...

6.5CVSS7.2AI score0.00116EPSS
Exploits0References1
Circl
Circl
added 2025/01/24 8:15 p.m.3 views

CVE-2025-24755

creationtimestamp| type| source ---|---|--- 2025-01-24 20:15:49+00:00| seen| https://t.me/cvedetector/16317 2025-01-24 23:47:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113885998982869713...

6.5CVSS7.3AI score0.00116EPSS
Exploits0References2
NVD
NVD
added 2025/01/24 6:15 p.m.14 views

CVE-2025-24755

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Stored XSS.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 4.6.0...

6.5CVSS0.00116EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/24 5:25 p.m.21 views

CVE-2025-24755 WordPress PDF Invoice Builder for WooCommerce plugin <= 4.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Stored XSS.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 4.6.0...

6.5CVSS0.00116EPSS
Exploits0References1
Cloud Foundry
Cloud Foundry
added 2024/04/04 12:0 a.m.30 views

USN-6659-1: libde265 vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a...

7.8CVSS7.2AI score0.00391EPSS
Exploits13Affected Software2
Tenable Nessus
Tenable Nessus
added 2024/02/27 12:0 a.m.35 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : libde265 vulnerabilities (USN-6659-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6659-1 advisory. It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into...

7.8CVSS7AI score0.00391EPSS
Exploits13References14
OpenVAS
OpenVAS
added 2024/02/27 12:0 a.m.21 views

Ubuntu: Security Advisory (USN-6659-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.4AI score0.00391EPSS
Exploits13References2
Ubuntu
Ubuntu
added 2024/02/26 6:50 p.m.33 views

USN-6659-1: libde265 vulnerabilities

It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2022-43244, CVE-2022-43249, CVE-2022-43250,...

7.8CVSS7AI score0.00391EPSS
Exploits13
Circl
Circl
added 2024/02/01 11:26 p.m.0 views

CVE-2024-24755

creationtimestamp| type| source ---|---|--- 2024-02-01 23:26:38+00:00| seen| https://t.me/ctinow/177826 2024-02-24 16:11:32+00:00| seen| https://t.me/ctinow/192642...

5.3CVSS5.5AI score0.00194EPSS
Exploits0References2
NVD
NVD
added 2024/02/01 10:15 p.m.10 views

CVE-2024-24755

discourse-group-membership-ip-block is a discourse plugin that adds support for adding users to groups based on their IP address. discourse-group-membership-ip-block was sending all group custom fields to the client, including group custom fields from other plugins which may expect their custom...

5.3CVSS4.8AI score0.00194EPSS
Exploits0References2
OSV
OSV
added 2024/02/01 10:14 p.m.21 views

CVE-2024-24755 discourse-group-membership-ip-block is exposing potentially sensitive custom fields

discourse-group-membership-ip-block is a discourse plugin that adds support for adding users to groups based on their IP address. discourse-group-membership-ip-block was sending all group custom fields to the client, including group custom fields from other plugins which may expect their custom...

4.3CVSS5.3AI score0.00194EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/02/01 10:14 p.m.18 views

CVE-2024-24755 discourse-group-membership-ip-block is exposing potentially sensitive custom fields

discourse-group-membership-ip-block is a discourse plugin that adds support for adding users to groups based on their IP address. discourse-group-membership-ip-block was sending all group custom fields to the client, including group custom fields from other plugins which may expect their custom...

4.3CVSS5.5AI score0.00194EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/03/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2023-0093)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.1AI score0.00482EPSS
Exploits46References7
Debian
Debian
added 2023/03/04 5:38 p.m.23 views

[SECURITY] [DLA 3352-1] libde265 security update

Debian LTS Advisory DLA-3352-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost March 04, 2023 https://wiki.debian.org/LTS Package : libde265 Version : 1.0.11-0+deb10u4 CVE ID : CVE-2023-24751 CVE-2023-24752 CVE-2023-24754 CVE-2023-24755 CVE-2023-24756 CVE-2023-24757...

7.8CVSS6.9AI score0.0036EPSS
Exploits8
Circl
Circl
added 2023/03/01 6:33 p.m.0 views

CVE-2023-24755

creationtimestamp| type| source ---|---|--- 2023-03-01 18:33:33+00:00| seen| https://t.me/cibsecurity/59233...

5.5CVSS6.1AI score0.00033EPSS
Exploits1References1
CVE
CVE
added 2023/03/01 12:0 a.m.65 views

CVE-2023-24755

CVE-2023-24755 concerns libde265 v1.0.10, where a NULL pointer dereference in the function put_weighted_pred_8_fallback (fallback-motion.cc) allows a crafted input file to trigger a Denial of Service. Public advisories confirm the issue and list v1.0.11 as the fix (e.g., Debian DLA-3352-1). Remed...

5.5CVSS5.4AI score0.00033EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/01 12:0 a.m.4 views

CVE-2023-24755

libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the putweightedpred8fallback function at fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input file...

7.2AI score0.00033EPSS
Exploits1References2
Circl
Circl
added 2022/03/15 5:19 p.m.3 views

CVE-2022-24755

creationtimestamp| type| source ---|---|--- 2022-03-15 17:19:20+00:00| seen| https://t.me/cibsecurity/38925...

9.8CVSS8.7AI score0.00475EPSS
Exploits1References1
Rows per page
Query Builder