6722 matches found
CVE-2024-57549
CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request...
CVE-2025-24150
creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxv4zdy22b 2025-01-28 00:23:40+00:00| seen| https://t.me/cvedetector/16540 2025-01-28 00:59:40+00:00| seen|...
CVE-2025-24140
creationtimestamp| type| source ---|---|--- 2025-01-27 22:18:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxuo2fon27...
CVE-2025-24138
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A malicious application may be able to leak sensitive user information...
CVE-2025-24100
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access information about a user's contacts...
CVE-2024-56968
An issue in Shenzhen Intellirocks Tech Co. Ltd Govee Home iOS 6.5.01 allows attackers to access sensitive user information via supplying a crafted payload...
CVE-2025-24364
vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwardenrs. Attacker with authenticated access to the vaultwarden admin panel can execute arbitrary code in the system. The attacker could then change some settings to use sendmail as mail agent but adjus...
CVE-2025-24356
fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This "fast...
CVE-2025-0733
CVE-2025-0733 pertains to Postman (Windows) up to version 11.20, affecting an unspecified part of profapi.dll. The issue enables an untrusted search path via local access, with attack complexity described as high and exploitability deemed difficult. Public documentation notes a denial of a confir...
CVE-2025-24365
CVE-2025-24365 affects vaultwarden (unofficial Bitwarden-compatible server in Rust, previously bitwarden_rs). The description in connected sources shows an attacker can obtain owner rights of another organization by knowing the victim organization ID and being the owner/admin of a different organ...
CVE-2024-54146
Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of hosttemplates.php using the graphtemplate parameter. This vulnerability is fixed in 1.2.29...
CVE-2024-57276
creationtimestamp| type| source ---|---|--- 2025-01-27 16:36:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113901292449278960 2025-01-27 17:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgxv6iqm2h 2025-01-27 18:55:23+00:00| seen|...
CVE-2025-24671
creationtimestamp| type| source ---|---|--- 2025-01-27 15:17:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqactmce42t 2025-01-27 16:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113901339610666506 2025-01-27 18:49:16+00:00| seen|...
CVE-2025-23752
creationtimestamp| type| source ---|---|--- 2025-01-27 15:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqabcdvze2t...
CVE-2025-24782
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Post Grid, Slider & Carousel Ultimate post-grid-carousel-ultimate allows PHP Local File Inclusion.This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through...
CVE-2024-12345
CVE-2024-12345 affects INW Krbyyyzo 25.2002, specifically the Daily Huddle Site component. The vulnerability is in the file /gbo.aspx where tampering the argument s can cause resource consumption, enabling a local-host attack and potentially affecting other endpoints. Public sources consistently ...
CVE-2024-48417
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Cross Site Scripting XSS in : /bin/goahead via /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter...
CVE-2024-56964
CVE-2024-56964 affects Guazi Used Car iOS 10.15.1. The connected sources indicate that an attacker can access sensitive user information by supplying a crafted link, implying a vulnerability in how links trigger data exposure. The base CVSS metrics in the Initial document show a Medium severity (...
