CVE-2024-12902

creationtimestamp| type| source ---|---|--- 2024-12-23 10:28:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113701665986684770 2024-12-23 11:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldxsiluiq425 2024-12-23 13:19:09+00:00| seen|...

CVE-2024-55947

creationtimestamp| type| source ---|---|--- 2024-12-23 02:35:41+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-qf5v-rp47-55gg 2024-12-23 15:30:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113702851146280575 2024-12-23 18:20:00+00:00| seen|...

CVE-2024-12893

creationtimestamp| type| source ---|---|--- 2024-12-22 08:01:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113695425480271204 2024-12-22 08:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lduxxw7mx325 2024-12-22 09:43:32+00:00| seen|...

CVE-2024-11349

creationtimestamp| type| source ---|---|--- 2024-12-21 04:32:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113688938401502566 2024-12-21 05:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lds5h3c6q222 2024-12-21 06:58:13+00:00| seen|...

CVE-2024-56358

grist-core is a spreadsheet hosting server. A user visiting a malicious document and previewing an attachment could have their account compromised, because JavaScript in an SVG file would be evaluated in the context of their current page. This issue has been patched in version 1.3.2. Users are...

CVE-2024-12844

creationtimestamp| type| source ---|---|--- 2024-12-20 21:08:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113687193668589108 2024-12-20 21:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrcmnnqgg2z 2024-12-20 23:26:41+00:00| seen|...

CVE-2024-12843

creationtimestamp| type| source ---|---|--- 2024-12-20 20:36:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113687068606536471 2024-12-20 21:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrcmlci7z2m 2024-12-20 23:26:40+00:00| seen|...

GHSA-QMCW-H4F9-J3H3

creationtimestamp| type| source ---|---|--- 2024-12-20 19:55:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113686907311266678...

CVE-2024-12840

creationtimestamp| type| source ---|---|--- 2024-12-20 15:54:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113685957532019218 2024-12-20 16:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqruoehfi2m 2024-12-20 18:25:25+00:00| seen|...

CVE-2024-56356

creationtimestamp| type| source ---|---|--- 2024-12-20 14:47:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113685694654086981 2024-12-20 15:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqojkmfsy2a 2024-12-20 16:44:54+00:00| seen|...

CVE-2024-56354

creationtimestamp| type| source ---|---|--- 2024-12-20 14:32:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113685635637875461 2024-12-20 15:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqojg7ci522 2024-12-20 16:44:53+00:00| seen|...

CVE-2024-56350

creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576592470411 2024-12-20 15:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoj5gvjm2m 2024-12-20 16:44:59+00:00| seen|...

CVE-2024-11775 Particle Background <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Particle Background plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'particleground' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-10555

creationtimestamp| type| source ---|---|--- 2024-12-20 06:01:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113683628327672465 2024-12-20 06:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpqdpjsbe2b 2024-12-20 08:23:01+00:00| seen|...

CVE-2024-11108

creationtimestamp| type| source ---|---|--- 2024-12-20 06:01:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113683628356774178 2024-12-20 06:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpqdtzba725 2024-12-20 08:23:02+00:00| seen|...

CVE-2024-44195

A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to read arbitrary files...

CVE-2024-44231

creationtimestamp| type| source ---|---|--- 2024-12-20 04:10:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113683192721474205 2024-12-20 04:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpjmtijuj25 2024-12-20 05:52:29+00:00| seen|...

CVE-2024-44231

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to bypass Login Window during a software update...

CVE-2024-44292

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data...

CVE-2024-12678

Nomad Community and Nomad Enterprise "Nomad" allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16...