CVE-2024-46971

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

CVE-2024-54337

creationtimestamp| type| source ---|---|--- 2024-12-13 17:27:06+00:00| seen| https://t.me/cvedetector/12893 2024-12-14 03:30:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113649058192514298...

CVE-2023-32585

creationtimestamp| type| source ---|---|--- 2024-12-13 16:14:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113646401026447283...

CVE-2023-33324

Missing Authorization vulnerability in wppal Easy Captcha allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Captcha: from n/a through 1.0...

CVE-2024-54298

CVE-2024-54298 applies to Car Dealer (CarDealer/Dealership) and Vehicle sales plugins, with a Missing Authorization vulnerability caused by incorrectly configured access control levels. Public disclosures in RH and Wordfence entries confirm impact as Broken Access Control on Car Dealer <= 4.46...

CVE-2024-54256

CVE-2024-54256 corresponds to a Missing Authorization issue in WordPress plugin Seerox Easy Blocks Pro (versions

CVE-2023-38480 WordPress Booster Elementor Addons plugin <= 1.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Certain Dev Booster Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster Elementor Addons: from n/a through 1.4.9...

CVE-2024-55889

phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an element without user interaction or explicit consent...

CVE-2024-38488

CVE-2024-38488 affects Dell RecoverPoint for Virtual Machines 6.0.x. The root cause is an improper restriction of excessive authentication on the login form, enabling a network attacker to perform brute-force/dictionary attempts that could lead to a complete system compromise. The vulnerability i...

CVE-2024-11837

creationtimestamp| type| source ---|---|--- 2024-12-13 06:08:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113644020030698635 2024-12-13 08:14:33+00:00| seen| https://t.me/cvedetector/12836...

CVE-2024-55878

creationtimestamp| type| source ---|---|--- 2024-12-12 19:22:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113641477891690387 2024-12-12 22:12:12+00:00| seen| https://t.me/cvedetector/12811...

CVE-2024-54811

creationtimestamp| type| source ---|---|--- 2024-12-12 18:28:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113641267578732747 2024-12-12 21:21:57+00:00| seen| https://t.me/cvedetector/12806...

CVE-2024-54111

Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-54107

Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-54106

Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-12292 Insertion of Sensitive Information into Log File in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.0 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, where sensitive information passed in GraphQL mutations may have been retained in GraphQL logs...

CVE-2024-47540

A flaw was found in the Matroska/WebM demuxer in the GStreamer library. Processing a specially crafted input file can cause the usage of uninitialized stack memory, allowing calls to uninitialized function pointers, potentially resulting in code execution or an application crash. Mitigation Do no...

CVE-2024-11760

creationtimestamp| type| source ---|---|--- 2024-12-12 08:34:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113638930498221732 2024-12-12 11:19:22+00:00| seen| https://t.me/cvedetector/12756...

CVE-2024-11724

creationtimestamp| type| source ---|---|--- 2024-12-12 06:51:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113638525180877879 2024-12-12 08:48:56+00:00| seen| https://t.me/cvedetector/12750...

CVE-2024-11709

The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aipostgeneratordeletePost AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated attackers, with...