CVE-2025-23033

creationtimestamp| type| source ---|---|--- 2025-01-14 01:18:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3fujit52b 2025-01-14 03:07:09+00:00| seen| https://t.me/cvedetector/15208 2025-01-14 04:31:42+00:00| seen|...

CVE-2025-23032

creationtimestamp| type| source ---|---|--- 2025-01-14 01:18:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3frwu6d2s 2025-01-14 03:07:18+00:00| seen| https://t.me/cvedetector/15216 2025-01-14 04:31:41+00:00| seen|...

CVE-2024-57639

creationtimestamp| type| source ---|---|--- 2025-01-14 01:16:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cj4o6p2n 2025-01-14 02:01:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113824241418005061 2025-01-15 15:55:17+00:00|...

CVE-2024-57636

creationtimestamp| type| source ---|---|--- 2025-01-14 01:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cbvepu2r 2025-01-14 01:46:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113824182388487639...

CVE-2024-11396

The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.3 via the Visitors List Export file. During the export, a CSV file is created in the wp-content folder with a hardcoded filena...

CVE-2024-57658

An issue in the sqltreehash1 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57654

creationtimestamp| type| source ---|---|--- 2025-01-14 01:08:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1436 2025-01-14 01:17:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dok4w32p 2025-01-14 02:46:34+00:00| seen|...

CVE-2024-12298

creationtimestamp| type| source ---|---|--- 2025-01-14 01:07:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1422 2025-01-14 01:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3aks7t32r...

CVE-2025-0068 Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP

An obsolete functionality in SAP NetWeaver Application Server ABAP did not perform necessary authorization checks. Because of this, an authenticated attacker could obtain information that would otherwise be restricted. It has no impact on integrity or availability on the application...

CVE-2024-57646

The psiginfo component in openlink virtuoso-opensource v7.2.11 is vulnerable to a Denial of Service (DoS) attack. This vulnerability is caused by the improper elimination of special elements used in SQL commands, which allows an attacker to trigger a service failure by sending specially crafted S...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2025-1018)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-57634

An issue in the exp_copy component of MonetDB Server v11.49.1 allows an attacker to trigger a Denial of Service (DoS) by submitting crafted SQL statements. The vulnerability is categorized under CWE-89 (Improper Neutralization of Special Elements used in an SQL Command). As a mitigation, it is re...

CVE-2024-57656

An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. This vulnerability affects various distributions, including Amazon Linux 2, Oracle Linux 7, and Red Hat Enterprise Linux 7 Exten...

CVE-2024-57653

An issue in the qstvecsetcopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57626

The MonetDB Server v11.49.1 is affected by a vulnerability in the mat_join2 component. This flaw allows an attacker to trigger a Denial of Service (DoS) by submitting crafted SQL statements. While no official patch is currently specified, a temporary workaround is to disable the mat_join2 compone...

CVE-2024-57632

An issue in the is_column_unique component of MonetDB Server v11.49.1 allows an attacker to cause a Denial of Service (DoS) by providing crafted SQL statements . As a temporary workaround until a patch is available, users of version 11.49.1 should consider disabling the is_column_unique component...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1057)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-51491

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List CRL based revocation check feature. After retrieving the CRL, notation-go...

CVE-2025-22615 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the CadastroAtendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts...

CVE-2025-22142

creationtimestamp| type| source ---|---|--- 2025-01-13 19:59:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113822816616033754 2025-01-13 20:07:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1369 2025-01-13 22:05:40+00:00| seen|...