219 matches found
High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables
Cybersecurity researchers have disclosed a high-severity security flaw in the PostgreSQL open-source database system that could allow unprivileged users to alter environment variables, and potentially lead to code execution or information disclosure. The vulnerability, tracked as CVE-2024-10979 ,...
Multiple Siemens Products Input Validation Error Vulnerability (CNVD-2024-44937)
SCALANCE M-800, MUM-800 and S615 and RUGGEDCOM RM1224 are industrial routers. An input validation error vulnerability exists in multiple Siemens products and can be exploited by attackers to compromise system integrity...
BELL-CVE-2024-50023
Bulletin has no description...
CVE-2024-42458
server.c in Neat VNC aka neatvnc before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369...
BELL-CVE-2024-41011
Bulletin has no description...
CVE-2024-21741
GigaDevice GD32E103C8T6 devices have Incorrect Access Control...
CVE-2024-36549
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/vpsCompanydeal.php?mudi=rev&nohrefStr=close...
CVE-2024-35629
CVE-2024-35629 affects the WordPress plugin Easy Digital Downloads – Recent Purchases (versions
Intel® Neural Compressor Software Advisory
Summary: Potential security vulnerabilities in some Intel® Neural Compressor software may allow escalation of privilege and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-22476 Description: Improper...
CVE-2024-21022
...
manipulyator-77.ru Cross Site Scripting vulnerability OBB-3917014
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
gymger.de Cross Site Scripting vulnerability OBB-3913532
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
oakwoodescrow.com Cross Site Scripting vulnerability OBB-3908387
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
jewishvirtualreality.com Cross Site Scripting vulnerability OBB-3906594
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
franciscosautorepair.com Cross Site Scripting vulnerability OBB-3905998
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2024-15869 · WordPress · Appointment Booking Calendar
Name of the Vulnerable Software and Affected Versions: Appointment Booking Calendar WordPress plugin versions prior to 1.3.83 Description: The issue concerns a lack of CSRF checks in certain areas, potentially allowing attackers to trick logged-in users into performing unwanted actions, such as...
Arm DS for Intel® SoC FPGA Software Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00930.html...
CVE-2023-48815
creationtimestamp| type| source ---|---|--- 2023-12-23 09:41:51+00:00| seen| https://t.me/ctinow/158748...