CVE-2024-49230

creationtimestamp| type| source ---|---|--- 2024-10-18 12:44:35+00:00| seen| https://t.me/cvedetector/8321...

CVE-2024-47326

creationtimestamp| type| source ---|---|--- 2024-10-06 14:02:35+00:00| seen| https://t.me/cvedetector/7142...

CVE-2024-45248 Multi-DNC – CWE-35: Path Traversal: '.../...//'

Multi-DNC – CWE-35: Path Traversal: '.../...//'...

CVE-2024-44023

creationtimestamp| type| source ---|---|--- 2024-10-05 16:17:35+00:00| seen| https://t.me/cvedetector/7070...

GHSA-G54F-66MW-HV66 Agnai vulnerable to Relative Path Traversal in Image Upload

Summary A vulnerability has been discovered in Agnai that permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for...

GHSA-H355-HM5H-CM8H Agnai File Disclosure Vulnerability: JSON via Path Traversal

CWE-35: Path Traversal https://cwe.mitre.org/data/definitions/35.html CVSSv3.1 4.3 - Medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Summary A vulnerability has been discovered in Agnai that permits attackers to read arbitrary JS...

CVE-2024-8941

creationtimestamp| type| source ---|---|--- 2024-09-25 04:16:35+00:00| seen| https://t.me/cvedetector/6247...

CVE-2024-31196

creationtimestamp| type| source ---|---|--- 2024-09-18 16:44:35+00:00| seen| https://t.me/cvedetector/5961...

CVE-2024-6482

creationtimestamp| type| source ---|---|--- 2024-09-14 15:41:35+00:00| seen| https://t.me/cvedetector/5673...

openSUSE Security Advisory (SUSE-SU-2024:3003-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-43787

creationtimestamp| type| source ---|---|--- 2024-08-22 07:04:45+00:00| published-proof-of-concept| https://github.com/honojs/hono/security/advisories/GHSA-rpfr-3m35-5vx5 2024-08-22 17:42:35+00:00| seen| https://t.me/cvedetector/3920...

SUSE SLES12: MozillaFirefox / MozillaFirefox-branding-SLE / MozillaFirefox-devel / etc (SUSE-SU-2024:2876-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2876-1 advisory. Update to Firefox Extended Support Release 128.1.0 ESR MFSA 2024-35, bsc1228648 - CVE-2024-7518: Fullscreen notification dialog can...

CVE-2024-39287

creationtimestamp| type| source ---|---|--- 2024-08-08 20:35:09+00:00| seen| https://t.me/cvedetector/2812...

CVE-2024-41070 KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvmspaprtceattachiommugroup Al reported a possible use-after-free UAF in kvmspaprtceattachiommugroup. It looks up stt from tablefd, but then continues to use it after doing fdput on the returne...

CVE-2024-37550

creationtimestamp| type| source ---|---|--- 2024-07-21 10:01:35+00:00| seen| https://t.me/cvedetector/1307...

CVE-2024-6588

creationtimestamp| type| source ---|---|--- 2024-07-12 10:13:35+00:00| seen| https://t.me/cvedetector/715...

CVE-2024-39565

creationtimestamp| type| source ---|---|--- 2024-07-11 01:35:17+00:00| seen| https://t.me/cvedetector/603...

Fedoraproject Fedora SEoL (35.x)

According to its version, Fedoraproject Fedora is 35.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 ...

Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal

Multiple threat actors are weaponizing a design flaw in Foxit PDF Reader to deliver a variety of malware such as Agent Tesla, AsyncRAT, DCRat, NanoCore RAT, NjRAT, Pony, Remcos RAT, and XWorm. "This exploit triggers security warnings that could deceive unsuspecting users into executing harmful...

Adobe Substance 3D Designer < 13.1.2 Memory Leak (APSB24-35) (macOS)

The version of Adobe Substance 3D Designer installed on the remote macOS host is prior to 13.1.2. It is, therefore, affected by a Remote Code Execution vulnerability as referenced in the APSB24-35 advisory. Successful exploitation of these vulnerabilities could lead to memory leaks in the context...