6722 matches found
CVE-2024-56139
pdftools is a high level tools to convert PDF files to ePUB formats. In versions up to and including 0.5.0 maliciously crafted epub files can cause a stack overflow leading to a crash. This issue has not yet been addressed and users are advised to avoid untrusted input to their systems...
CVE-2024-12193 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...
CVE-2024-12220
creationtimestamp| type| source ---|---|--- 2024-12-17 07:29:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113666985358645445 2024-12-17 10:05:36+00:00| seen| https://t.me/cvedetector/13074...
CVE-2024-55104
creationtimestamp| type| source ---|---|--- 2024-12-16 20:41:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113664437415240281 2024-12-16 23:13:33+00:00| seen| https://t.me/cvedetector/13041...
CVE-2024-12664
A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
CVE-2024-12666
creationtimestamp| type| source ---|---|--- 2024-12-16 20:03:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113664290594036492 2024-12-16 21:33:09+00:00| seen| https://t.me/cvedetector/13036...
CVE-2024-12654
A vulnerability classified as problematic was found in FabulaTech USB over Network 6.0.6.1. Affected by this vulnerability is the function 0x220408 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. T...
CVE-2024-55999
CVE-2024-55999 is a Missing Authorization vulnerability in the XML Multilanguage Sitemap Generator WordPress plugin. Affected software: XML Multilanguage Sitemap Generator
CVE-2024-54285
CVE-2024-54285 is a real vulnerability affecting SeedProd Pro plugin (WordPress). The entry describes an Unrestricted Upload of File with Dangerous Type that allows uploading a web shell to the web server. Affected: SeedProd Pro from n/a up to version 6.18.10. The CVE is labeled as a Remote Code ...
CVE-2024-54438
Cross-Site Request Forgery CSRF vulnerability in gaxx Gaxx Keywords gaxx-keywords allows Stored XSS.This issue affects Gaxx Keywords: from n/a through = 0.2...
CVE-2024-54373
creationtimestamp| type| source ---|---|--- 2024-12-16 14:51:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113663060597293785...
CVE-2024-54416 WordPress Wp Login with Ajax plugin <= 0.6 - CSRF to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery CSRF vulnerability in Navdeep Wp Login with Ajax wp-login-with-ajax allows Stored XSS.This issue affects Wp Login with Ajax: from n/a through = 0.6...
CVE-2024-12478
InvoicePlane 1.x is affected up to 1.6.1 by CVE-2024-12478 due to unrestricted upload via the upload_file function at /index.php/upload/upload_file/1/1. The issue allows remote abuse of the file parameter to upload arbitrary content. A fixed version is 1.6.2-beta-1; upgrading addresses the vulner...
CVE-2024-49848
creationtimestamp| type| source ---|---|--- 2024-12-16 05:11:23+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html 2024-12-16 16:32:28+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113663459141722483 2024-12-16...
CVE-2024-56074
gitingest before 9996a06 mishandles symbolic links that point outside of the base directory...
CVE-2024-11883
creationtimestamp| type| source ---|---|--- 2024-12-14 05:18:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113649485095070617 2024-12-14 06:49:46+00:00| seen| https://t.me/cvedetector/12921...
CVE-2024-54295
creationtimestamp| type| source ---|---|--- 2024-12-14 00:59:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113648467689963073...
CVE-2024-54287
creationtimestamp| type| source ---|---|--- 2024-12-14 00:44:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113648408589117175...