CVE-2024-56672

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix UAF in blkcgunpinonline blkcgunpinonline walks up the blkcg hierarchy putting the online pin. To walk up, it uses blkcgparentblkcg but it was calling that after blkcgdestroyblkgsblkcg which could free the blkcg,...

CVE-2024-53194

creationtimestamp| type| source ---|---|--- 2024-12-27 14:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6ipf5ch2i 2024-12-27 15:37:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113725526766251402 2025-08-14 10:00:00+00:00| seen|...

CVE-2024-56527

creationtimestamp| type| source ---|---|--- 2024-12-27 05:49:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113723216064255733 2024-12-27 06:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lebdmmtxt52m 2024-12-27 07:37:41+00:00| seen|...

CVE-2024-12959

CVE-2024-12959 affects the open-source 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is in the file /update_personal_details.php, where manipulating the query parameter q enables SQL injection. Exploitation is possible remotely, and the exploit has been disclosed publicly. ...

CVE-2024-10797

creationtimestamp| type| source ---|---|--- 2024-12-21 08:26:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113689861743823547 2024-12-21 09:15:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsktxicc22a 2024-12-21 11:09:09+00:00| seen|...

CVE-2024-56351

CVE-2024-56351 affects JetBrains TeamCity prior to version 2024.12. The root issue is that access tokens were not revoked after removing user roles, potentially allowing unauthorized access to tokens tied to former roles. The vulnerability is scoped to TeamCity’s authentication/session handling a...

CVE-2024-12121

creationtimestamp| type| source ---|---|--- 2024-12-19 02:28:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113677125841932115 2024-12-19 03:55:51+00:00| seen| https://t.me/cvedetector/13302...

CVE-2023-23357

creationtimestamp| type| source ---|---|--- 2024-12-19 02:28:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113677125798560166 2024-12-19 03:55:45+00:00| seen| https://t.me/cvedetector/13299...

GHSA-Q9QV-8J52-77P3

creationtimestamp| type| source ---|---|--- 2024-12-18 19:36:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113675507926963180...

CVE-2024-12192

creationtimestamp| type| source ---|---|--- 2024-12-17 15:35:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113668896719374803 2024-12-17 17:36:51+00:00| seen| https://t.me/cvedetector/13104 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1705/...

CVE-2024-54393

creationtimestamp| type| source ---|---|--- 2024-12-16 15:21:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113663178698262476...

CVE-2024-54327

creationtimestamp| type| source ---|---|--- 2024-12-14 03:00:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113648940102532081...

CVE-2023-38383

creationtimestamp| type| source ---|---|--- 2024-12-13 18:59:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113647050539371467...

CVE-2024-54347

creationtimestamp| type| source ---|---|--- 2024-12-13 17:26:45+00:00| seen| https://t.me/cvedetector/12878 2024-12-14 04:15:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113649235306758428...

CVE-2024-54337

CVE-2024-54337 is a CSRF-to-stored XSS vulnerability in the DX Dark Site plugin (DevriX) affecting versions up to 1.0.1. It has a CVSS v3.1 base score of 7.1 (HIGH). Wordfence and RH/Red Hat records indicate a patched fix is available; affected installations should update to the patched version i...

GHSA-M592-G8QV-HRQX

creationtimestamp| type| source ---|---|--- 2024-12-12 19:35:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113641528492308277...

CVE-2024-21575

creationtimestamp| type| source ---|---|--- 2024-12-12 14:20:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113640292881857434 2024-12-12 17:11:03+00:00| seen| https://t.me/cvedetector/12796...

CVE-2024-49114

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability...

Debian dla-3977 : xfpt - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-3977 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3977-1 [email protected] https://www.debian.org/lts/security/...

CVE-2024-49109

Technical details about CVE-2024-49109 (Wireless Wide Area Network Service Elevation of Privilege) are not publicly provided in the connected documents. The available entries supply only high‑level description and references; no specifics on affected products, root cause, vectors, or fixes are gi...