CVE-2024-56455

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56452

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56447

creationtimestamp| type| source ---|---|--- 2025-01-08 03:10:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113790537431113615 2025-01-08 03:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7762xt2h22 2025-01-08 03:40:08+00:00| seen|...

CVE-2024-56446

CVE-2024-56446 concerns Huawei HarmonyOS with a vulnerability in the notification module where variables are not initialized. The impact described is potential availability disruption. The documents do not specify affected product versions, root cause details beyond the initialization issue, expl...

CVE-2025-0218 pgAgent scheduled batch job scripts are created in a predictable temporary directory potentially allowing a denial of service

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...

CVE-2024-40749

creationtimestamp| type| source ---|---|--- 2025-01-07 16:27:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113788009476631166 2025-01-07 16:43:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/474 2025-01-07 17:16:02+00:00| seen|...

CVE-2025-22555

creationtimestamp| type| source ---|---|--- 2025-01-07 16:19:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62h5tt6d2k...

CVE-2025-22554

creationtimestamp| type| source ---|---|--- 2025-01-07 16:18:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62h3fujx2l...

CVE-2025-22546

creationtimestamp| type| source ---|---|--- 2025-01-07 16:18:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62gijoio2a...

CVE-2025-0243

creationtimestamp| type| source ---|---|--- 2025-01-07 16:16:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62deqros25...

CVE-2024-28778

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys. This vulnerability allows users to publish code to private packages or repositories under the name of the organization...

CVE-2024-25037 IBM Cognos Controller information disclosure

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser...

CVE-2025-22577 WordPress Able Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Damion Armentrout Able Player wp-able-player allows DOM-Based XSS.This issue affects Able Player: from n/a through = 1.0...

CVE-2025-0295 code-projects Online Book Shop booklist.php cross site scripting

A vulnerability was found in code-projects Online Book Shop 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /booklist.php?subcatid=1. The manipulation of the argument subcatnm leads to cross site scripting. The attack may be launched remotely. T...

CVE-2024-12532

creationtimestamp| type| source ---|---|--- 2025-01-07 11:37:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/392 2025-01-07 12:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5muozicb2l 2025-01-07 12:53:33+00:00| seen|...

CVE-2024-12425

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal. An attacker can write to arbitrary locations, albeit suffixed with ".ttf", by supplying a file in a format that supports embedded font...

CVE-2024-56278 WordPress WP Ultimate Exporter plugin <= 2.9.1 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Smackcoders WP Ultimate Exporter allows PHP Remote File Inclusion.This issue affects WP Ultimate Exporter: from n/a through 2.9.1...

CVE-2024-12699

CVE-2024-12699 describes a Stored XSS in the WordPress Service Box plugin (all versions up to 1.9) due to insufficient input sanitization and output escaping. The vulnerability requires authentication at Contributor level or higher and can allow injection of arbitrary scripts on pages that execut...

CVE-2024-11625

Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421...

CVE-2024-10536 FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor <= 6.0.0 - Missing Authorization to Authenticated (Subscriber+) Shortcode Export

The FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handleblockshortcodeexport function in all versions up to, and including, 6.0.0. This...