CVE-2024-11230

creationtimestamp| type| source ---|---|--- 2024-12-23 04:33:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113700268905676956 2024-12-23 05:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldx6escxdn2z 2024-12-23 06:37:54+00:00| seen|...

CVE-2024-12900

FoxCMS CVE-2024-12900 affects the Configuration File Handler’s /install/installdb.php. The root cause is manipulation of the database password argument, enabling code injection. The vulnerability is exploitable remotely and has public disclosures. Affected versions are FoxCMS up to 1.2; PT-Securi...

CVE-2024-12893

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. Affected by this issue is some unknown functionality of the file /usuarios/tipos/2 of the component Tipo de Usuário Page. The manipulation of the argument name leads to cross site scripting. The...

CVE-2024-12883 code-projects Job Recruitment _email.php cross site scripting

A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /email.php. The manipulation of the argument email leads to cross site scripting. The attack can be launched remotely. The...

CVE-2024-12845

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.1. Affected by this vulnerability is an unknown functionality in the library /include/lib/common.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has...

CVE-2024-28767

IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request...

CVE-2024-10555 MaxButtons < 9.8.1 - Admin+ Stored XSS via Button Width

The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisit...

Chromium: CVE-2024-12692 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2024-12798

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

CVE-2024-25131

CVE-2024-25131 is linked to OpenShift Must Gather Operator Improper Input Validation. The vulnerability arises in the MustGather.managed.openshift.io CRD, where a non-privileged cluster user can create a MustGather object with a crafted file and set the most privileged service account to run the ...

CVE-2024-9101

A reflected cross-site scripting XSS vulnerability in the 'Entry Chooser' of phpLDAPadmin version 1.2.1 through the latest version, 1.2.6.7 allows attackers to execute arbitrary JavaScript in the user's browser via the 'element' parameter, which is unsafely passed to the JavaScript 'eval' functio...

CVE-2024-9101

creationtimestamp| type| source ---|---|--- 2024-12-19 13:47:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113679798764647197 2024-12-19 14:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo2oyx6342b 2024-12-19 15:39:20+00:00| seen|...

CVE-2024-45819 libxl leaks data to PVH guests via ACPI tables

PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the tables in local memory, which are then copied into guest memory. While actually used parts of the local memory are filled in correctly, excess space that is being allocated is left with its prio...

CVE-2024-47039

creationtimestamp| type| source ---|---|--- 2024-12-18 19:12:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113675414286324728 2024-12-18 21:13:39+00:00| seen| https://t.me/cvedetector/13237 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...

CVE-2024-56049

creationtimestamp| type| source ---|---|--- 2024-12-18 19:07:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113675392559580115 2024-12-18 21:13:25+00:00| seen| https://t.me/cvedetector/13227...

CVE-2024-11614

An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using...

CVE-2024-56319

Matter (aka connectedhomeip/Project CHIP) CVE-2024-56319 affects versions up to 1.4.0.0 before commit e3277eb. The issue is an unlimited number of user labels appended in a userlabel cluster, leading to a denial of service via resource exhaustion. The CVSS 3.1 vector indicates network attack with...

CVE-2024-56319

In Matter aka connectedhomeip or Project CHIP through 1.4.0.0 before e3277eb, unlimited user label appends in a userlabel cluster can lead to a denial of service resource exhaustion...

CVE-2024-29646

Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields...

CVE-2024-55516

creationtimestamp| type| source ---|---|--- 2024-12-17 20:05:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113669959037867060 2024-12-17 21:48:08+00:00| seen| https://t.me/cvedetector/13125...