CVE-2024-12967

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function flnupdate of the file /parse/alledits.php. The manipulation of the argument fname/lname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-45600 Fields GLPI plugin has an Authenticated SQL Injection

Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when the plugin is active. The vulnerability is fixed in 1.21.13...

CVE-2024-12966

CVE-2024-12966 affects code-projects Job Recruitment 1.0. The vulnerability lies in the cn_update function in /_parse/_all_edits.php, where manipulation of the cname and url parameters enables SQL injection. Exploitation appears remote and has been disclosed publicly. Multiple sources corroborate...

CVE-2024-12962

creationtimestamp| type| source ---|---|--- 2024-12-26 19:02:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113720670272522449 2024-12-26 20:45:11+00:00| seen| https://t.me/cvedetector/13691...

[SECURITY] [DSA 5836-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5836-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 26, 2024 https://www.debian.org/security/faq -...

CVE-2024-47148

creationtimestamp| type| source ---|---|--- 2024-12-26 12:07:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113719038894686088 2024-12-26 12:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le7halueoj2i 2024-12-26 14:03:48+00:00| seen|...

CVE-2024-12942

creationtimestamp| type| source ---|---|--- 2024-12-26 08:01:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113718072802078139 2024-12-26 08:15:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le6ztflwyg2o 2024-12-26 09:52:56+00:00| seen|...

CVE-2024-12931

creationtimestamp| type| source ---|---|--- 2024-12-26 02:52:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113716859337895197 2024-12-26 03:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le6j3t4mti2c 2024-12-26 04:51:56+00:00| seen|...

CVE-2024-1609

creationtimestamp| type| source ---|---|--- 2024-12-25 03:39:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113711379006140273 2024-12-25 04:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xrcewt2l 2024-12-25 06:17:23+00:00| seen|...

CVE-2024-56430

OpenFHE through 1.2.3 has a NULL pointer dereference in BinFHEContext::EvalFloor in lib/binfhe-base-scheme.cpp...

Mageia: Security Advisory (MGASA-2024-0397)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2483

...

CVE-2024-53162

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat4xxx - fix off by one in uofgetname The fwobjs array has "numobjs" elements so the needs to be = to prevent an out of bounds read...

CVE-2024-53152

creationtimestamp| type| source ---|---|--- 2024-12-24 11:49:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113707645609849060 2024-12-24 12:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le2gdj4p3i2c 2024-12-24 14:24:24+00:00| seen|...

CVE-2024-53149 usb: typec: ucsi: glink: fix off-by-one in connector_status

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

CVE-2024-53241

creationtimestamp| type| source ---|---|--- 2024-12-24 09:43:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113707151082355360 2024-12-24 10:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le27mmbjti2e 2024-12-24 11:53:39+00:00| seen|...

CVE-2024-12850

creationtimestamp| type| source ---|---|--- 2024-12-24 09:28:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113707092053678320 2024-12-24 10:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le27meyl7h2k 2024-12-24 11:53:39+00:00| seen|...

CVE-2024-9427

creationtimestamp| type| source ---|---|--- 2024-12-24 04:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzliem3642m 2024-12-24 06:02:15+00:00| seen| https://t.me/cvedetector/13550 2025-06-11 00:34:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18031...

CVE-2024-56363

creationtimestamp| type| source ---|---|--- 2024-12-23 17:28:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113703315103089292 2024-12-23 20:00:28+00:00| seen| https://t.me/cvedetector/13547...

CVE-2024-55539

Weak algorithm used to sign RPM package. The following products are affected: Acronis Cyber Protect Cloud Agent Linux before build 39185, Acronis Cyber Protect 16 Linux before build 39938...