CVE-2024-12208

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-43269. Reason: This candidate is a reservation duplicate of CVE-2024-43269. Notes: All CVE users should reference CVE-2024-43269 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2024-12126

The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘googleerror’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

CVE-2024-12322

creationtimestamp| type| source ---|---|--- 2025-01-07 04:36:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/302 2025-01-07 05:17:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhkglt422 2025-01-07 05:48:09+00:00| seen|...

CVE-2024-12176

CVE-2024-12176 (WordLift – AI powered SEO – Schema) details : The WordLift WordPress plugin is vulnerable to unauthorized access via a missing capability check on the wl_config_plugin AJAX action, affecting all versions up to and including 3.54.0. This enables unauthenticated attackers to update ...

CVE-2024-12332

CVE-2024-12332 : The School Management System – WPSchoolPress WordPress plugin, up to version 2.2.14, is affected by SQL Injection via the cid parameter due to insufficient escaping and query preparation. Exploitation requires authenticated access at Student/Parent level or higher, enabling an at...

CVE-2024-50660

CVE-2024-50660 affects iPublish AdPortal 3.0.39 (AdPortal). The Red Hat, NVD, and related feeds confirm a File Upload Bypass vulnerability that enables a remote attacker to execute arbitrary code via the file upload functionality. The underlying issue is a bypass of upload checks allowing code ex...

CVE-2024-46981

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate...

CVE-2024-56762

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: fix sqpoll error handling races BUG: KASAN: slab-use-after-free in lockacquire+0x370b/0x4a10 kernel/locking/lockdep.c:5089 Call Trace: ... rawspinlockirqsave+0x3d/0x60 kernel/locking/spinlock.c:162...

CVE-2024-55628

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log...

CVE-2024-55627

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during initialization with memset due to an unsigned integer...

CVE-2024-56768 bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpfgetsmpprocessorid on !CONFIGSMP On x86-64 calling bpfgetsmpprocessorid in a kernel with CONFIGSMP disabled can trigger the following bug, as pcpuhot is unavailable: 8.471774 BUG: unable to handle page fault for addres...

CVE-2024-56767

In the Linux kernel, the following vulnerability has been resolved: dmaengine: atxdmac: avoid nullprtderef in atxdmacprepdmamemset The atxdmacmemsetcreatedesc may return NULL, which will lead to a null pointer dereference. For example, the len input is error, or the atchan-freedescslist is empty...

CVE-2024-56762

CVE-2024-56762 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2024-45558

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length...

CVE-2024-45541

CVE-2024-45541 affects Qualcomm chipsets where a memory corruption occurs when an IOCTL is invoked from user-space to read board data. The vulnerability is triggered through a local IOCTL path (low privileges, no user interaction) and results in memory corruption on the target device. CVSS metric...

CVE-2024-56332

A flaw was found in Next.js package. A denial of service DoS attack allows attackers to construct requests that leave requests to Server Actions hanging until the hosting provider cancels the function execution. The Next.js server is idle during that time and only keeps the connection open. The C...

CVE-2024-20146

creationtimestamp| type| source ---|---|--- 2025-01-06 03:47:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113779361367368443 2025-01-06 04:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2bkonc6k2a 2025-01-06 04:42:47+00:00| seen|...

CVE-2024-55407

ITE IO Access 1.0.0.0 contains a vulnerability in the DeviceloControl function that lets a local attacker perform arbitrary port read and write actions by supplying crafted IOCTL requests. The issue, reported across multiple sources (NVD, Red Hat, CNNVD, PT Security, etc.), indicates the underlyi...

CVE-2025-0231

A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submitpayments.php. The manipulation of the argument mid leads to sql injection. The attack can be launched...

CVE-2025-0224 Provision-ISR SH-4050A-2 server.js information disclosure

A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2LMM, SH-8100A-2LMM, SH-16200A-21U, SH-16200A-51U and NVR5-8200PX up to 20241220. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /server.js. The manipulation leads to...