CVE-2024-5594

creationtimestamp| type| source ---|---|--- 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06 2025-01-06 13:54:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113781746778966575 2025-01-06 14:15:27+00:00| seen|...

XenServer and Citrix Hypervisor Security Update for CVE-2024-45818

Description of Problem An issue has been identified that affects both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR and allows a malicious administrator of a guest VM to cause the host to crash or become unresponsive. This issue has the following identifier: CVE-2024-45818 What Customers Should ...

CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-5910 CVS...

CVE-2019-7254

creationtimestamp| type| source ---|---|--- 2024-11-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-08 2025-02-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-02 2025-04-07 00:00:00+00:00| seen| The Shadowserver...

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server, which...

CVE-2024-9681

creationtimestamp| type| source ---|---|--- 2024-11-06 07:20:11+00:00| seen| https://mastodon.social/users/bagder/statuses/113434795032364456 2024-11-06 07:48:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113434907880220824 2024-11-06 09:58:55+00:00| seen|...

CVE-2024-51559

This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters to gain unauthorized access and perform malicious activities on other user accounts...

CVE-2024-51559

The CVE-2024-51559 entry applies to Wave 2.0 and is supported by connected documents that describe a vulnerability caused by improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this by manipulating API input parameters (e.g., user_id) to gain una...

Brokerage Wave 安全漏洞

Brokerage Wave is a frontend product from Brokerage, Inc. A security vulnerability exists in Brokerage Wave version 2.0, which stems from a lack of authorization checking on certain API endpoints, which could allow a remote attacker to manipulate the parameter userid via the API request URL to...

CVE-2024-51378

creationtimestamp| type| source ---|---|--- 2024-10-30 00:49:07+00:00| exploited| https://t.me/cvedetector/9380 2024-10-30 02:57:23+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8886 2024-11-01 15:52:35+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/6249...

CVE-2021-22707

creationtimestamp| type| source ---|---|--- 2024-10-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-30 2024-11-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-04 2024-11-10 00:00:00+00:00| exploited| The...

CVE-2024-9574

creationtimestamp| type| source ---|---|--- 2024-10-07 17:38:18+00:00| seen| https://t.me/cvedetector/7235 2025-03-27 11:40:11+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lle7pdqgz624 2026-06-22 21:37:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3movtsu64qn2...

SUSE CVE-2024-8118

In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules...

UBUNTU-CVE-2024-8118

In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules...

Grafana 安全漏洞

Grafana is a set of open source monitoring tools from Grafana open source that provides a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. Grafana suffers from a security vulnerability that stems from incorrect...

Grafana alerting wrong permission on datasource rule write endpoint

In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules. This vulnerability first appeared in Grafana v8.5.0, and is fixed in v11.2.1, v11.1.6, v11.0.5, v10.4.9, and v10.3.10...

Authorization Bypass

Sentry is vulnerable to Authorization Bypass. The vulnerability is due to improper scoping of authorization checks on requests to mute alert rules, which allows authenticated users to mute alerts without being members of the organization or having the required permissions on the project...

GHSA-V345-W9F2-MPM5 Sentry improperly authorizes muting of alert rules

Impact An authenticated user can mute alert rules from arbitrary organizations and projects given a known given rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we have identified no instances where alerts have been muted by...

CVE-2024-27112

creationtimestamp| type| source ---|---|--- 2024-09-11 17:00:57+00:00| seen| https://t.me/cvedetector/5362 2025-03-11 14:40:21+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk4ccrrxss24...

CVE-2024-27113

creationtimestamp| type| source ---|---|--- 2024-09-11 17:00:53+00:00| seen| https://t.me/cvedetector/5361 2025-03-11 14:40:23+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk4ccsk67u2p...