freerdp: out-of-bounds read

A flaw was found in FreeRDP-based clients. Affected versions of FreeRDP are vulnerable to an out-of-bounds read. This issue occurs when the WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against the redirection server...

PT-2024-8714 · Siemens · Scalance Wam766-1 +15

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions prior to V8.2 RUGGEDCOM RM1224 LTE4G NAM versions prior to V8.2 SCALANCE M804PB versions prior to V8.2 SCALANCE M812-1 ADSL-Router versions prior to V8.2 SCALANCE M816-1 ADSL-Router versions prior to V8.2...

Lingdang CRM 路径遍历漏洞

Lingdang CRM Lingdang CRM is a customer relationship management system from the Chinese company Lingdang Lingdang. A path traversal vulnerability exists in Lingdang CRM version 8.6.4.3 and earlier versions, which stems from the parameter url in the file /crm/data/pdf.php that can lead to path...

PT-2024-8713 · Siemens · Scalance Mum856-1 +13

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions prior to V8.2 RUGGEDCOM RM1224 LTE4G NAM versions prior to V8.2 SCALANCE M804PB versions prior to V8.2 SCALANCE M812-1 ADSL-Router versions prior to V8.2 SCALANCE M816-1 ADSL-Router versions prior to V8.2...

November 12, 2024-KB5046541 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2

None None...

.NET 8.0 Update - November 12, 2024 (KB5047489)

None None...

PT-2024-8712 · Siemens · Scalance Mum856-1 +13

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions V8.2 RUGGEDCOM RM1224 LTE4G NAM versions V8.2 SCALANCE M804PB versions V8.2 SCALANCE M812-1 ADSL-Router versions V8.2 SCALANCE M816-1 ADSL-Router versions V8.2 SCALANCE M826-2 SHDSL-Router versions V8.2...

AZL-53063 CVE-2024-52531 affecting package libsoup for versions less than 3.4.4-2

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...

DEBIAN-CVE-2024-52531

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...

libsoup 缓冲区错误漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A security vulnerability exists in libsoup versions prior to 3.6.1, which stems from a buffer overflow in applications that allow UTF-8 conversions to be performed in the soupheaderparseparamliststrict...

PT-2024-34860 · Tre Technology Research S.R.L · Hq60 Fidelity Card

Name of the Vulnerable Software and Affected Versions: TRe Technology And Research S.R.L HQ60 Fidelity Card versions 1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected...

PT-2024-34835 · Unknown · Cf7 Wow Styler

Name of the Vulnerable Software and Affected Versions: CF7 WOW Styler versions 1.6.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS, which can be exploited...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Access Control Error vulnerability that stems from a failure to properly query ElasticSearch when searching for a channel name in the channel switcher, which can be exploited...

PT-2024-35098 · Mattermost +1 · Mattermost +1

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.2 Mattermost versions 10.0.x through 10.0.0 Description: The issue arises when searching for channel names in the channel switcher, allowing an attacker to obtain private channel names they are not a...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to improper handling in the Readutf8 function. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

WordPress Bread & Butter plugin <= 7.4.857 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Bread & Butter versions = 7.4.857...

CVE-2024-50183

creationtimestamp| type| source ---|---|--- 2024-11-08 05:44:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113445742200266929 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

The vulnerability of the python38._pth file of the Python interpreter lies in its ability to ignore the restrictions specified in the python38._pth file within sys.path. This allows a malicious actor to execute arbitrary code.

The vulnerability of the python38.pth file of the Python interpreter involves ignoring the restrictions specified in the python38.pth file within sys.path. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2024-34417 · Sdcms · Sdcms

Name of the Vulnerable Software and Affected Versions: SDCMS version 2.8 Description: The theme.php file in SDCMS has a command execution vulnerability that allows for the execution of system commands. Recommendations: For SDCMS version 2.8, consider disabling the theme.php file or restricting it...

CLSA-2024-1730919779 java-1.8.0-openjdk: Fix of 4 CVEs

Upgrade to shenandoah-jdk8u432-b06 fixing the following CVEs: - CVE-2024-21208: unauthorized partial DoS vulnerability - CVE-2024-21210: unauthorized update, insert, or delete access to some of data - CVE-2024-21217: unauthorized partial DoS vulnerability - CVE-2024-21235: unauthorized update,...