CVE-2024-36617

creationtimestamp| type| source ---|---|--- 2024-11-29 18:14:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113567599588222861...

CVE-2024-36617

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...

CVE-2024-36618

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...

CVE-2024-52496

creationtimestamp| type| source ---|---|--- 2024-11-28 10:59:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113560230064969101...

CVE-2024-11786

creationtimestamp| type| source ---|---|--- 2024-11-28 09:20:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113559838014307428...

CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2018-9349

creationtimestamp| type| source ---|---|--- 2024-11-27 21:49:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113557120925743617...

CVE-2024-41125

creationtimestamp| type| source ---|---|--- 2024-11-27 18:35:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113556357993210876...

CVE-2024-11862

creationtimestamp| type| source ---|---|--- 2024-11-27 14:37:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113555421995502917...

CVE-2024-42327

A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is availabl...

CVE-2024-53676

creationtimestamp| type| source ---|---|--- 2024-11-27 00:33:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113552106287521279 2024-12-02 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1639/ 2025-03-05 03:28:11+00:00| seen|...

CVE-2024-51058

Local File Inclusion LFI vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from the server's file system through src tag, potentially exposing sensitive information...

CVE-2024-22117

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding...

CVE-2024-11024

creationtimestamp| type| source ---|---|--- 2024-11-26 11:12:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113548955816830247...

CVE-2024-53620

A cross-site scripting XSS vulnerability in the Article module of SPIP v4.3.3 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter...

CVE-2024-53261 Cross-Site Scripting attack (XSS) on dev mode 404 page in SvelteKit

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. "Unsanitized input from the request URL flows into end, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack XSS." The files...

CVE-2024-45755

creationtimestamp| type| source ---|---|--- 2024-11-25 17:06:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113544683796812204...

CVE-2023-45181

creationtimestamp| type| source ---|---|--- 2024-11-25 15:51:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113544390898409186...

CVE-2024-11651

creationtimestamp| type| source ---|---|--- 2024-11-25 02:47:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113541307344413717...

CVE-2024-53916

In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change add and clear tags on network objects that do not belong to the tenant...