CVE-2024-25883

creationtimestamp| type| source ---|---|--- 2025-02-06 21:35:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113959092587366089 2025-02-06 22:16:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gafyyd2a 2025-02-06 22:49:16+00:00| seen|...

CVE-2024-56467

creationtimestamp| type| source ---|---|--- 2025-02-06 20:32:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113958841808577146 2025-02-06 21:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjyz7demr24 2025-02-06 22:49:15+00:00| seen|...

CVE-2024-13416

CVE-2024-13416 affects the 2N OS platform. The issue arises when an authorized user uses the API to enable logging, which can disclose valid authentication tokens in the system log due to unfiltered token exposure. Impact is rated medium (CVSS 3.1: 4.3) with network access and low attack complexi...

CVE-2020-15069

creationtimestamp| type| source ---|---|--- 2025-02-06 17:21:53+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113958093669259699 2025-02-06 17:49:28+00:00| seen| https://bsky.app/profile/aakl.bsky.social/post/3lhjnigysgc2b 2025-02-06 17:49:29+00:00| seen|...

CVE-2025-22866

creationtimestamp| type| source ---|---|--- 2025-02-06 16:56:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113957993164493622 2025-02-06 17:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlnmekyk27 2025-02-06 18:48:58+00:00| seen|...

CVE-2024-57962

creationtimestamp| type| source ---|---|--- 2025-02-06 13:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6boodxo2w 2025-02-06 16:03:57+00:00| seen| https://t.me/cvedetector/17389 2025-02-06 16:43:48+00:00| seen|...

CVE-2024-57961

creationtimestamp| type| source ---|---|--- 2025-02-06 13:17:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6bm6g2r2r 2025-02-06 16:03:56+00:00| seen| https://t.me/cvedetector/17388 2025-02-06 16:43:49+00:00| seen|...

CVE-2024-13487

The The CURCY – Multi Currency for WooCommerce – The best free currency exchange plugin – Run smoothly on WooCommerce 9.x plugin for WordPress is vulnerable to arbitrary shortcode execution via the getproductsprice function in all versions up to, and including, 2.2.5. This is due to the software...

CVE-2021-37651

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.FractionalAvgPoolGrad can be tricked into accessing data outside of bounds of heap allocated buffers. The implementation does not validate that the input tensor is non-empt...

CVE-2021-31420

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-48950. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

CVE-2021-31482

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-44002

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker t...

CVE-2021-35242

Serv-U server responds with valid CSRFToken when the request contains only Session...

CVE-2006-2371

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:38+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:16+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2025-23711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quincy Kwende Quote me quote-me allows Reflected XSS.This issue affects Quote me: from n/a through = 1.0...

CVE-2022-25737

Information disclosure in modem due to missing NULL check while reading packets received from local network...

CVE-2025-23217

creationtimestamp| type| source ---|---|--- 2025-02-06 01:34:24+00:00| seen| https://bsky.app/profile/hi.ls/post/3lhhwyw4vzs2d 2025-02-06 17:54:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113958223039348997 2025-02-06 18:16:39+00:00| seen|...

CVE-2022-21346

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2022-21676

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the engine.io...

CVE-2022-3861

The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via deserialization of untrusted input supplied via the import, mfn-items-import-page, and mfn-items-import parameters passed through the mfnbuilderimport, mfnbuilderimportpage,...