6722 matches found
CVE-2025-0203
creationtimestamp| type| source ---|---|--- 2025-01-04 07:01:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113768796544207117 2025-01-04 08:54:15+00:00| seen| https://t.me/cvedetector/14263...
CVE-2025-22376
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong...
CVE-2024-12132 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated...
CVE-2025-0176
creationtimestamp| type| source ---|---|--- 2025-01-03 02:09:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113761987905371199 2025-01-03 02:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lesjh2etis2f 2025-01-03 02:37:32+00:00| seen|...
CVE-2024-43764
In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-43768
In skiaallocfunc of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-56253
creationtimestamp| type| source ---|---|--- 2025-01-02 12:21:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2thgadj2l 2025-01-02 12:42:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ler3zpl4rn2y 2025-01-02 14:15:12+00:00| seen|...
CVE-2024-56238
creationtimestamp| type| source ---|---|--- 2025-01-02 12:20:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2scl3vz2l 2025-01-02 19:38:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113760450082414072...
CVE-2024-56248
CVE-2024-56248 is a path traversal vulnerability in Webdeclic WPMasterToolKit (WPMTK) that allows authenticated attackers to download arbitrary files. Affected range includes WPMasterToolKit versions up to and including 1.13.1; root cause: improper limitation of a pathname to a restricted directo...
CVE-2024-37540
CVE-2024-37540 is a CSRF vulnerability in the WordPress plugin Leaky Paywall (versions n/a–4.21.2). The vulnerability is described as a Cross-Site Request Forgery issue affecting Leaky Paywall, with a CVSS 3.1 base score of 4.3 (Medium). Public references in the provided documents consistently ci...
BELL-CVE-2024-53165
Bulletin has no description...
CVE-2002-20002
Removed by vendor...
CVE-2024-21980
A flaw was found in SNP firmware. This vulnerability allows a malicious hypervisor to overwrite a guest's memory or UMC seed, resulting in loss of confidentiality and integrity via improper restriction of write operations. Mitigation Available mitigation requires to update BIOS for updating...
BELL-CVE-2024-56729
Bulletin has no description...
BELL-CVE-2024-56716
Bulletin has no description...
BELL-CVE-2024-56610
Bulletin has no description...
CVE-2024-23432
creationtimestamp| type| source ---|---|--- 2025-01-01 00:19:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbyu7y6c2a...
CVE-2024-23430
creationtimestamp| type| source ---|---|--- 2025-01-01 00:19:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbyorona25...