9437 matches found
CVE-2024-23369
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers...
CVE-2024-23365
Memory corruption while releasing shared resources in MinkSocket listener thread...
CVE-2024-23842
Improper Input Validation in Hitron Systems DVR LGUVR-16H 1.024.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2024-51995
Combodo iTop is a web based IT Service Management tool. An attacker can request any route we want as long as we specify an operation that is allowed. This issue has been addressed in version 3.2.0 by applying the same access control pattern as in UI.php to the ajax.render.php page which does not...
CVE-2024-33063
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...
CVE-2024-33015
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report...
CVE-2024-11597
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...
CVE-2024-11423
The Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule Gift Cards, and Use Advance Coupons With Personalized Templates plugin for WordPress is vulnerable to unauthorized modification of data d...
CVE-2024-31098
Missing Authorization vulnerability in Mr.Ebabi New Order Notification for Woocommerce.This issue affects New Order Notification for Woocommerce: from n/a through 2.0.2...
CVE-2024-57080
A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-53964
creationtimestamp| type| source ---|---|--- 2025-02-04 23:43:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113948269408710544 2025-02-05 00:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfc73besc2r 2025-02-05 03:16:24+00:00| seen|...
CVE-2024-0294
A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619B20230130. Affected by this issue is the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to os command injection. The attack may be launched remotely. T...
CVE-2024-0359
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...
CVE-2024-8884
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause exposure of credentials when attacker has access to application on network over http...
CVE-2024-35677
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...
CVE-2024-13722
creationtimestamp| type| source ---|---|--- 2025-02-04 22:07:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113947890915225546 2025-02-04 22:16:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhf3hjuolo2f 2025-02-05 00:45:45+00:00| seen|...
GHSA-2352-252Q-QC82
creationtimestamp| type| source ---|---|--- 2025-02-04 21:11:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113947671170575758...
CVE-2024-56197
creationtimestamp| type| source ---|---|--- 2025-02-04 21:03:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113947638509402541 2025-02-04 21:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhey472ubi2f 2025-02-04 22:23:46+00:00| seen|...
CVE-2025-22601
creationtimestamp| type| source ---|---|--- 2025-02-04 20:57:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113947614990713817 2025-02-04 21:16:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhey4e2h7j2t 2025-02-04 22:23:41+00:00| seen|...