6722 matches found
keepalived security update
An update is available for keepalived. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The keepalived utility provides simple and robust facilities for load...
CVE-2024-11346
CVE-2024-11346 affects Lexmark printers (CX, XC, CS, and related models) via the Postscript interpreter modules. The issue is a type confusion vulnerability in the Postscript interpreter that allows Resource Injection . Public sources corroborate that an attacker could potentially execute arbitra...
CVE-2024-12012
A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. Both the SHA-1 hash of the password as well as the session tokens are included as part of the URL and therefore exposed to information leakage...
CVE-2024-12011
creationtimestamp| type| source ---|---|--- 2025-02-13 16:02:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113997416189281935...
CVE-2025-1060
CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data when network traffic is being sniffed by an attacker...
CVE-2024-13227 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in all versions up to, and including, 1.0.235 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...
CVE-2025-25525
Buffer overflow vulnerability in H3C FA3010L access points SWFA1B0V100R005 due to the lack of length verification, which is related to the setting of firewall rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...
CVE-2023-29164
creationtimestamp| type| source ---|---|--- 2025-02-12 21:28:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113993035631115529 2025-02-12 22:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz76pqkgp2a 2025-02-14 10:06:02+00:00| seen|...
CVE-2024-39355
CVE-2024-39355 concerns Intel processors and is described as an improper handling of physical/environmental conditions that could let an authenticated user cause a denial of service via local access. The CVE lists LOCAL attack vector, LOW privileges required, and NO user interaction, with MEDIUM ...
CVE-2025-0995
creationtimestamp| type| source ---|---|--- 2025-02-12 19:07:27+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113992482587961618 2025-02-13 08:06:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113995544258025325 2025-02-14 23:26:24+00:00| seen|...
CVE-2025-26370
creationtimestamp| type| source ---|---|--- 2025-02-12 15:37:02+00:00| seen| Telegram/vEXhmHLUKpE92yUkDLFonQzaP6w4B8ZTzitUZ1hGZlUqw 2025-02-12 15:50:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113991709972553512 2025-02-12 16:02:54+00:00| seen| https://t.me/cvedetector/17877...
CVE-2025-1206
creationtimestamp| type| source ---|---|--- 2025-02-12 15:16:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqsj5ui2s 2025-02-12 18:33:37+00:00| seen| https://t.me/cvedetector/17897 2025-02-20 23:27:06+00:00| seen|...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
CVE-2024-57952
creationtimestamp| type| source ---|---|--- 2025-02-12 14:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyeewjky62z 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2024-13653
The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backupoptions' and 'restoreoptions' functions in all versions up to, and including, 2.12.0. Thi...
CVE-2023-20508
creationtimestamp| type| source ---|---|--- 2025-02-12 00:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwvhekung2s 2025-02-12 01:09:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3955 2025-02-12 04:19:30+00:00| seen| https://t.me/cvedetector/17805...
CVE-2025-24428
creationtimestamp| type| source ---|---|--- 2025-02-11 18:19:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbjktylp2a 2025-02-11 21:33:37+00:00| seen| https://t.me/cvedetector/17745...
CVE-2025-24419
creationtimestamp| type| source ---|---|--- 2025-02-11 18:19:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbisd77j2a 2025-04-15 16:55:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11865...