6722 matches found
CVE-2024-12461
creationtimestamp| type| source ---|---|--- 2024-12-12 04:33:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113637984702888114 2024-12-12 06:17:25+00:00| seen| https://t.me/cvedetector/12691...
CVE-2024-12258
creationtimestamp| type| source ---|---|--- 2024-12-12 04:18:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113637925659841653 2024-12-12 06:17:22+00:00| seen| https://t.me/cvedetector/12687...
CVE-2024-11689
creationtimestamp| type| source ---|---|--- 2024-12-12 04:18:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113637925616482478 2024-12-12 06:17:30+00:00| seen| https://t.me/cvedetector/12695...
CVE-2024-49104
Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...
CVE-2024-47834
GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GSTMATROSKAIDCODECPRIVATE case within the gstmatroskademuxparsestream function, a dat...
CVE-2024-47774
GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gstavisubtitleparsegab2chunk function within gstavisubtitle.c. The function reads the namelength value directly from the input file without checking it properly. Then,...
CVE-2024-44291
A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A malicious app may be able to gain root privileges...
CVE-2024-54526
The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A malicious app may be able to access private information...
CVE-2024-12486
creationtimestamp| type| source ---|---|--- 2024-12-11 20:40:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113636121248132427 2024-12-12 02:56:25+00:00| seen| https://t.me/cvedetector/12649...
CVE-2024-47603 GHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxer
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxupdatetracks function within matroska-demux.c. The vulnerability occurs when the gstcapsisequal function is called with invalid caps...
CVE-2024-47599
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstjpegdecnegotiate function in gstjpegdec.c. This function does not check for a NULL return value from gstvideodecodersetoutputstate. When this happens...
CVE-2024-47597
CVE-2024-47597 : GStreamer contains an out-of-bounds read in qtdemux_parse_samples() of qtdemux.c when reading data beyond the stream->stco buffer (via qt_atom_parser_get_offset_unchecked). This can cause an 8-byte read past the intended boundary when processing the provided sample. The issue ...
CVE-2024-47761
GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the sent notifications contents can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue...
CVE-2024-53677
CVE-2024-53677 affects Apache Struts 2 (from 2.0.0 up to, but not including, 6.4.0). The root cause is flawed file upload logic that can be manipulated to enable path traversal, potentially allowing a malicious file upload and, under certain conditions, remote code execution (RCE). Public PoCs an...
CVE-2024-11053
When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...
CVE-2024-55655
CVE-2024-55655 affects sigstore-python versions newer than 2.0.0 but before 3.6.0, with insufficient validation of the integration time in v2/v3 bundles during verification. The integration time is checked only when a source of signed time (e.g., an inclusion promise) exists; otherwise it is trus...
CVE-2024-12382
creationtimestamp| type| source ---|---|--- 2024-12-10 23:02:34+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113631019234576069 2024-12-11 14:54:42+00:00| seen| https://t.me/CyberBulletin/26760 2024-12-11 14:54:43+00:00| seen| https://t.me/CyberBulletin/1733 2024-12-11...
CVE-2024-54051 Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction...
CVE-2024-45155
Adobe Animate is affected by an Access of Uninitialized Pointer vulnerability (CVE-2024-45155) in versions 23.0.8, 24.0.5 and earlier, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Remediation: update to th...