CVE-2024-57639

An issue in the dceltsize component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57647

An issue in the rowinsertcast component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-54730

CVE-2024-54730 covers a denial-of-service in Flatnotes versions prior to 5.3.1, caused by the image upload function. The vulnerability is observed in the web interface where uploading an image can exhaust resources, leading to service disruption. Public records across multiple sources confirm the...

CVE-2024-13159

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2025-22617

creationtimestamp| type| source ---|---|--- 2025-01-13 20:59:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113823054108124936 2025-01-13 21:11:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1388 2025-01-13 21:15:54+00:00| seen|...

CVE-2025-22614

creationtimestamp| type| source ---|---|--- 2025-01-13 20:59:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113823054063636127 2025-01-13 21:11:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1381 2025-01-13 21:15:46+00:00| seen|...

CVE-2025-22619 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_permissoes.php' parameter 'msg_c'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the editarpermissoes.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts...

CVE-2025-22144

creationtimestamp| type| source ---|---|--- 2025-01-13 19:53:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113822794348210157 2025-01-13 20:07:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1374 2025-01-13 22:05:41+00:00| seen|...

CVE-2024-46481

creationtimestamp| type| source ---|---|--- 2025-01-13 19:53:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113822794330501003 2025-01-13 20:07:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1370 2025-01-13 22:05:45+00:00| seen|...

BELL-CVE-2024-56769

Bulletin has no description...

CVE-2024-57879

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: iso: Always release hdev at the end of isolistenbis Since hcigetroute holds the device before returning, the hdev should be released with hcidevput at the end of isolistenbis even if the function returns with an error...

CVE-2024-46921

The CVE-2024-46921 issue affects Samsung Mobile Processor and Modem lines (Exynos 9820/9825/980/990/1080/2100/1280/2200/1330/1380/1480/2400/9110/W1000 and Modem 5123/5300/5400). The vulnerability is that the UE does not throttle the number of attempts for the 5G SA RRC Setup procedure, which can ...

CVE-2023-42227

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function...

CVE-2025-0396

creationtimestamp| type| source ---|---|--- 2025-01-12 12:01:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113815276779820224 2025-01-12 12:04:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1336 2025-01-12 12:15:31+00:00| seen|...

CVE-2024-57850

In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruption The rtime decompression routine does not fully check bounds during the entirety of the decompression pass and can corrupt memory outside the decompression buffer if the compressed...

CVE-2024-57880

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...

CVE-2025-23127

creationtimestamp| type| source ---|---|--- 2025-01-11 15:08:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113810347151105651 2025-01-11 15:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhysc6h6p2k 2025-01-11 15:39:31+00:00| seen|...

CVE-2024-57874

creationtimestamp| type| source ---|---|--- 2025-01-11 15:04:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1321 2025-01-11 15:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrke5mx2k 2025-01-11 15:39:28+00:00| seen|...

CVE-2025-23124

creationtimestamp| type| source ---|---|--- 2025-01-11 14:53:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113810288117347671 2025-01-11 15:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhys2pbor22 2025-01-11 15:39:31+00:00| seen|...

CVE-2024-57875 block: RCU protect disk->conv_zones_bitmap

In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...