CVE-2024-44309

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. App...

CVE-2024-44308

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that th...

CVE-2024-44309

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. App...

CVE-2024-44309

CVE-2024-44309 concerns a cookie management issue in Apple environments. The root cause is improper state management that can enable cross-site scripting when processing malicious web content. Affected products/versions include Safari 18.1.1, iOS 17.7.2, iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 1...

CVE-2024-44308

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that th...

CVE-2024-44308

creationtimestamp| type| source ---|---|--- 2024-11-19 18:58:42+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113511151778117019 2024-11-20 02:02:31+00:00| exploited| https://t.me/cvedetector/11552 2024-11-20 04:00:00+00:00| seen|...

WordPress Save as PDF plugin by Pdfcrowd Plugin <= 4.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Save as PDF plugin by Pdfcrowd Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10891 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bc2c8b0bae5b Credits Peter...

CVE-2024-0012

creationtimestamp| type| source ---|---|--- 2024-11-18 14:20:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2024-0012 2024-11-18 14:29:11+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113504429682120533 2024-11-18 14:42:18+00:00| seen|...

CVE-2022-23961

creationtimestamp| type| source ---|---|--- 2024-11-18 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-18 2025-01-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-28 2025-01-29 00:00:00+00:00| exploited| The Shadowserver...

CVE-2020-8191

creationtimestamp| type| source ---|---|--- 2024-11-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-18 2024-12-17 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-17 2024-12-24 00:00:00+00:00| seen| The Shadowserver...

CVE-2022-45933

creationtimestamp| type| source ---|---|--- 2024-11-17 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-17 2024-11-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-25 2024-11-29 00:00:00+00:00| exploited| The...

CVE-2018-13315

creationtimestamp| type| source ---|---|--- 2024-11-16 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-16 2024-11-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-23 2024-11-27 00:00:00+00:00| seen| The Shadowserver...

GHSA-PG82-9W35-3W3R FitNesse Cross-site scripting

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

FitNesse Cross-site scripting

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

FitNesse Path Traversal

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specif...

CVE-2024-39610

CVE-2024-39610 is a cross-site scripting vulnerability in FitNesse releases prior to 20241026. The issue could allow an arbitrary script to run in the web browser of users consuming the affected software. The Connected documents confirm the vulnerability in FitNesse and note the fixed version as ...

CVE-2024-39610

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

CVE-2024-39610

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...

CVE-2024-42499

FitNesse (CVE-2024-42499) is affected by an improper limitation of a pathname to a restricted directory (Path Traversal) in releases prior to 20241026. An attacker may determine if a file exists at a given path and possibly obtain parts of file contents under certain conditions. Root cause: pathn...

CVE-2024-42499

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specif...