CVE-2024-11378

The Bizapp for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'error' parameter in all versions up to, and including, 2.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

CVE-2024-55410

An issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component of Asus GPU Tweak II Program Driver v1.0.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55407

creationtimestamp| type| source ---|---|--- 2025-01-06 18:52:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113782918236590215 2025-01-06 19:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3tuaz3tz2m 2025-01-06 19:47:34+00:00| seen|...

CVE-2024-48456

CVE-2024-48456 affects Netis WiFi routers including NX10 (2.0.1.3643/2.0.1.3582), NC65 (3.0.0.3749), NC63 (3.0.0.3327–3.0.0.3503), NC21 (3.0.0.3800/3.0.0.3500/3.0.0.3329), and MW5360 (1.0.1.3442/1.0.1.3031). It enables a remote attacker to obtain sensitive information by abusing the password para...

CVE-2024-11974

The CVE-2024-11974 vulnerability affects the Media Library Assistant WordPress plugin. It enables Reflected Cross-Site Scripting via the smc_settings_tab, unattachfixit-action, and woofixit-action parameters in all versions up to and including 3.23, due to insufficient input sanitization and outp...

CVE-2024-55896

creationtimestamp| type| source ---|---|--- 2025-01-03 22:29:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113766784516427162 2025-01-04 01:22:58+00:00| seen| https://t.me/cvedetector/14247...

CVE-2023-47179

creationtimestamp| type| source ---|---|--- 2025-01-02 12:17:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2mmuxxd25 2025-01-02 14:53:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113759328143716872...

CVE-2024-56022 WordPress Preloader by WordPress Monsters plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordPress Monsters Preloader by WordPress Monsters allows Reflected XSS.This issue affects Preloader by WordPress Monsters: from n/a through 1.2.3...

CVE-2024-37490 WordPress Bard theme <= 2.210 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wproyal Bard bard allows Cross Site Request Forgery.This issue affects Bard: from n/a through = 2.210...

CVE-2024-23417

creationtimestamp| type| source ---|---|--- 2025-01-01 00:18:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbxord6f2m...

CVE-2024-23411

creationtimestamp| type| source ---|---|--- 2025-01-01 00:18:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbx7qpts2a...

CVE-2024-13072

creationtimestamp| type| source ---|---|--- 2024-12-31 15:08:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113748061784746161 2024-12-31 15:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemdnedfhx2i 2024-12-31 17:03:38+00:00| seen|...

CVE-2024-56218

Cross-Site Request Forgery CSRF vulnerability in sevenspark Contact Form 7 – Dynamic Text Extension contact-form-7-dynamic-text-extension allows Cross Site Request Forgery.This issue affects Contact Form 7 – Dynamic Text Extension: from n/a through = 5.0.1...

CVE-2024-12993 Location information exposure in Infinix Weather app

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact the vendor we did not receive any answer. We...

CVE-2024-56752 drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gr/gf100: Fix missing unlock in gf100grchannew When the call to gf100grctxgenerate fails, unlock gr-fecs.mutex before returning the error. Fixes smatch warning: drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:480...

CVE-2023-7263

Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.Vulnerability ID:HWPSIRT-2023-53450 This vulnerability has been assigned a CVEID:CVE-2023-7263...

CVE-2024-56664

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

CVE-2024-56596

CVE-2024-56596 relates to the Linux kernel, in the JFS filesystem implementation. The issue is an array-index-out-of-bounds in jfs_readdir, caused by potential invalid values in the directory index table (stbl). The fix adds a validation check to detect invalid stbl values and return an error cod...

CVE-2024-56531

creationtimestamp| type| source ---|---|--- 2024-12-27 14:18:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6m7qntg2m 2024-12-27 16:00:43+00:00| seen| https://t.me/cvedetector/13760 2025-01-03 10:29:21+00:00| seen|...

CVE-2024-53228 riscv: kvm: Fix out-of-bounds array access

In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: Fix out-of-bounds array access In kvmriscvvcpusbiinit the entry-extidx can contain an out-of-bound index. This is used as a special marker for the base extensions, that cannot be disabled. However, when traversing the...