CVE-2024-23389

creationtimestamp| type| source ---|---|--- 2025-01-01 00:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbvjxmsg22...

CVE-2024-21716

creationtimestamp| type| source ---|---|--- 2025-01-01 00:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbv3nhwv2m...

CVE-2024-13081

Summary: CVE-2024-13081 affects PHPGurukul Land Record System 1.0. The vulnerability is a cross-site scripting flaw in the /admin/contactus.php file, triggered by manipulating the Page Description parameter. This can be exploited remotely and the exploit has been disclosed publicly. Details from ...

CVE-2024-56061

CVE-2024-56061: Missing Authorization in RepairBuddy CRM WordPress plugin (Webful Creations Computer Repair Shop) enables Privilege Escalation via account takeover for authenticated users. Affected: CRM WordPress Plugin – RepairBuddy, versions up to 3.8119 (per CVE record). Root cause: Missing au...

CVE-2024-56216

creationtimestamp| type| source ---|---|--- 2024-12-31 10:20:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113746932170876812 2024-12-31 12:01:54+00:00| seen| https://t.me/cvedetector/13975...

CVE-2024-56230 WordPress Dynamic Product Category Grid, Slider for WooCommerce plugin <= 1.1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Maidul Dynamic Product Category Grid, Slider for WooCommerce dynamic-product-categories-design allows PHP Local File Inclusion.This issue affects Dynamic Product Category Grid,...

CVE-2024-13043

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2024-13042 Tsinghua Unigroup Electronic Archives Management System download.html download information disclosure

A vulnerability was found in Tsinghua Unigroup Electronic Archives Management System 3.2.21080262532. It has been classified as problematic. Affected is the function download of the file /Searchnew/Subject/download.html. The manipulation of the argument path leads to information disclosure. It is...

GHSA-C6FW-XW9X-GWJW

creationtimestamp| type| source ---|---|--- 2024-12-30 18:18:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113743149419974697...

CVE-2024-47921 Smadar SPS – CWE-327: Use of a Broken or Risky Cryptographic Algorithm

Smadar SPS – CWE-327: Use of a Broken or Risky Cryptographic Algorithm...

CVE-2024-56748

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix a possible memory leak in qedfallocandinitsb Hook "qedops-common-sbinit = qedsbinit" does not release the DMA memory sbvirt when it fails. Add dmafreecoherent to free it. This is the same way as qedrallocmemsb and...

CVE-2024-13031 Antabot White-Jotter Article Content Editor editor cross site scripting

A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Th...

CVE-2024-13028

A vulnerability, which was classified as problematic, has been found in Antabot White-Jotter up to 0.2.2. This issue affects some unknown processing of the file /login. The manipulation of the argument username leads to observable response discrepancy. The attack may be initiated remotely. The...

CVE-2024-13023

A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/search-maid.php of the component Search Maid Page. The manipulation of the argument searchdata leads to cross site scripting. Th...

CVE-2024-56707

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2dmacflt.c Add error pointer checks after calling otx2mboxgetrsp...

CVE-2024-56694

In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SKPASS When the streamverdict program returns SKPASS, it places the received skb into its own receive queue, but a recursive lock eventually occurs, leading to an operating syst...

CVE-2024-56691

In the Linux kernel, the following vulnerability has been resolved: mfd: intelsocpmicbxtwc: Use IRQ domain for USB Type-C device While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited flaws. This was unveiled when...

CVE-2024-56549

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix NULL pointer dereference in object-file At present, the object-file has the NULL pointer dereference problem in ondemand-mode. The root cause is that the allocated fd and object-file lifetime are inconsistent, and...

CVE-2024-56536

In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: Fix potential NULL dereference A recent refactoring was identified by static analysis to cause a potential NULL dereference, fix this!...

CVE-2024-56752

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gr/gf100: Fix missing unlock in gf100grchannew When the call to gf100grctxgenerate fails, unlock gr-fecs.mutex before returning the error. Fixes smatch warning: drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:480...