CVE-2024-12603

creationtimestamp| type| source ---|---|--- 2024-12-13 03:07:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113643308696425579 2024-12-13 04:53:40+00:00| seen| https://t.me/cvedetector/12818...

SUSE CVE-2024-47538

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

MAL-2024-11802 Malicious code in azuredatastudio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f18b345dc494772b0800d6b81807d5d930ceb567876dab5d06e478d66f5cda77 The OpenSSF Package Analysis project identified 'azuredatastudio' @ 1.53.0 npm as malicious. It is considered malicious because: - The package...

GHSA-9J3M-FR7Q-JXFW

creationtimestamp| type| source ---|---|--- 2024-12-12 19:29:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113641505474577906...

CVE-2024-55663

creationtimestamp| type| source ---|---|--- 2024-12-12 18:57:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113641379176104368 2024-12-12 21:21:58+00:00| seen| https://t.me/cvedetector/12807...

CVE-2024-55099

creationtimestamp| type| source ---|---|--- 2024-12-12 15:19:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113640524757203803 2024-12-12 18:01:12+00:00| seen| https://t.me/cvedetector/12797...

CVE-2024-28145

creationtimestamp| type| source ---|---|--- 2024-12-12 13:43:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113640145030708581 2024-12-12 16:20:49+00:00| seen| https://t.me/cvedetector/12791...

CVE-2024-28144

creationtimestamp| type| source ---|---|--- 2024-12-12 13:32:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113640101712655643 2024-12-12 16:20:48+00:00| seen| https://t.me/cvedetector/12790...

CVE-2024-54113

Technical details (affected products, components, root cause, vulnerable versions, remediation) are not provided in the supplied documents beyond the general description and CVSS context. Monitor for updates from official advisories.

CVE-2024-54108

Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-54101

creationtimestamp| type| source ---|---|--- 2024-12-12 11:44:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113639676531469272...

CVE-2024-44131

creationtimestamp| type| source ---|---|--- 2024-12-12 11:35:00+00:00| seen| https://thehackernews.com/2024/12/researchers-uncover-symlink-exploit.html 2024-12-12 13:40:46+00:00| seen| https://t.me/thehackernews/6033 2024-12-12 14:54:31+00:00| seen|...

CVE-2024-45470

creationtimestamp| type| source ---|---|--- 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...

CVE-2024-21574

The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install custom nodes which is added to the server by the extension. This allows an attacker to craft a request that triggers a pip install on a user controlled package or...

CVE-2024-12329

creationtimestamp| type| source ---|---|--- 2024-12-12 07:06:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113638584226065749 2024-12-12 08:48:49+00:00| seen| https://t.me/cvedetector/12745...

CVE-2024-11724 Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script

The Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker for GDPR, CCPA & ePrivacy plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wplscriptsave AJAX action in all versions up to, and including, 3.6.5...

CVE-2024-12040

creationtimestamp| type| source ---|---|--- 2024-12-12 05:57:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113638312581536551 2024-12-12 07:58:37+00:00| seen| https://t.me/cvedetector/12736...

CVE-2024-11359

creationtimestamp| type| source ---|---|--- 2024-12-12 05:27:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113638194437783016 2024-12-12 07:58:39+00:00| seen| https://t.me/cvedetector/12739...

CVE-2024-12255 Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure

The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via the cf7sa-info.php file that returns phpinfo data. This makes it possible for unauthenticated attackers to extract configuration information tha...

CVE-2024-11891

The Perfect Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pfai' shortcode in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...