CVE-2022-2540

The Link Optimizer Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 1.4.5. This is due to missing nonce validation on the adminpage function found in the /admin.php file. This makes it possible for unauthenticated...

CVE-2024-57079

creationtimestamp| type| source ---|---|--- 2025-02-05 21:16:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113953353375204676 2025-02-05 22:16:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxwf2mq2b 2025-02-06 01:50:54+00:00| seen|...

Security Bulletin: Vulnerability in http-proxy-middleware affects IBM watsonx Assistant for IBM Cloud Pak for Data

Summary Potential vulnerability in http-proxy-middleware has been identified that affects IBM watsonx Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-21536 DESCRIPTION:...

CVE-2022-39355

Discourse Patreon enables syncronization between Discourse Groups and Patreon rewards. On sites with Patreon login enabled, an improper authentication vulnerability could be used to take control of a victim's forum account. This vulnerability is patched in commit number...

CVE-2017-16272

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

CVE-2024-31156

creationtimestamp| type| source ---|---|--- 2025-02-05 18:22:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113952669633961882 2025-02-05 21:39:55+00:00| seen| https://t.me/cvedetector/17324...

CVE-2025-24320

creationtimestamp| type| source ---|---|--- 2025-02-05 18:17:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6l46iyi2r 2025-02-05 18:22:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113952669633961882 2025-02-05 18:48:32+00:00| seen|...

CVE-2024-56133

creationtimestamp| type| source ---|---|--- 2025-02-05 18:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6jnjorz2f 2025-02-05 18:48:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113952771094465939 2025-02-05 22:08:52+00:00| seen|...

CVE-2019-25152

The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 5.1.3 and 7.12.0 respectively, due to insufficient input sanitization and output escaping...

CVE-2025-23412

creationtimestamp| type| source ---|---|--- 2025-02-05 18:07:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113952610558009604 2025-02-05 18:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6kly63a2r 2025-02-05 21:40:07+00:00| seen|...

CVE-2025-21091

creationtimestamp| type| source ---|---|--- 2025-02-05 17:52:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113952551509166497 2025-02-05 18:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6kbyutm2w 2025-02-05 21:40:08+00:00| seen|...

CVE-2025-20171

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

CVE-2025-20207

creationtimestamp| type| source ---|---|--- 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 16:51:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113952312528088269 2025-02-05 17:16:33+00:00| seen|...

CVE-2025-20204

creationtimestamp| type| source ---|---|--- 2025-02-05 16:36:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113952253513111136 2025-02-05 16:37:05+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113952255128702135 2025-02-05 17:16:28+00:00| seen|...

CVE-2020-14824

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2020-10902

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-15795

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus Source Code Version...

CVE-2020-6116

An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. When drawing the contents of a page using colors from an indexed colorspace, the application can miscalculate the size of a buffer when allocating space for its colors...

CVE-2020-26230

Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymization of COVID-19 positive users that upload Radar COVID TEKs to the Radar COVID server is possible. This vulnerability enables the identification and...

CVE-2020-26224

In PrestaShop before version 1.7.6.9 an attacker is able to list all the orders placed on the website without being logged by abusing the function that allows a shopping cart to be recreated from an order already placed. The problem is fixed in 1.7.6.9...