9437 matches found
CVE-2024-47545
creationtimestamp| type| source ---|---|--- 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...
CVE-2024-8429
creationtimestamp| type| source ---|---|--- 2024-12-17 11:41:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113667976409824348 2024-12-17 14:16:04+00:00| seen| https://t.me/cvedetector/13087...
CVE-2024-21978
A flaw was found in the AMD firmware. This vulnerability allows a malicious hypervisor to read or overwrite guest memory, potentially leading to data leakage or data corruption. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...
CVE-2024-12220
creationtimestamp| type| source ---|---|--- 2024-12-17 07:29:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113666985358645445 2024-12-17 10:05:36+00:00| seen| https://t.me/cvedetector/13074...
CVE-2024-12219
CVE-2024-12219 affects the WordPress plugin Stop Registration Spam, up to version 1.23. It enables Cross-Site Request Forgery due to missing/incorrect nonce validation, allowing unauthenticated attackers to trigger actions that can inject script if a site admin is fooled. The vulnerability was ad...
CVE-2024-55919
Improper input validation on generic SSO login...
Welcome and About GeoServer pages communicate version and revision information
Impact The welcome and about page includes version and revision information about the software in use including library and components used. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Proof of Concept 1. Welco...
gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet
A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...
gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet
A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...
gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet
A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...
CVE-2024-54440
creationtimestamp| type| source ---|---|--- 2024-12-16 17:51:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113663769253195189...
CVE-2024-54402
creationtimestamp| type| source ---|---|--- 2024-12-16 15:51:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113663296790960840...
CVE-2024-54367
Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through = 2.1.0...
CVE-2024-54352
creationtimestamp| type| source ---|---|--- 2024-12-16 14:21:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113662942507679802...
Firmware Security: Identifying Risks to Implement Best Cybersecurity Practices
Find out the key security risks of firmware security: Identify threats, and learn best practices and protection methods…...
CVE-2024-48872
creationtimestamp| type| source ---|---|--- 2024-12-16 08:13:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113661496706625347 2024-12-16 09:49:05+00:00| seen| https://t.me/cvedetector/12977...
CVE-2024-11841
creationtimestamp| type| source ---|---|--- 2024-12-16 06:04:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113660989239338784 2024-12-16 08:08:46+00:00| seen| https://t.me/cvedetector/12966...
CVE-2024-56083
creationtimestamp| type| source ---|---|--- 2024-12-16 02:21:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113660113940700020 2024-12-16 04:47:55+00:00| seen| https://t.me/cvedetector/12956...
CVE-2024-56084
An issue was discovered in Logpoint UniversalNormalizer before 5.7.0. Authenticated users can inject payloads while creating Universal Normalizer. These are executed, leading to Remote Code Execution...
CVE-2024-8798
creationtimestamp| type| source ---|---|--- 2024-12-15 23:27:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113659427755343076 2024-12-16 02:17:24+00:00| seen| https://t.me/cvedetector/12955 2024-12-16 06:29:33+00:00| seen|...