CVE-2024-9102

creationtimestamp| type| source ---|---|--- 2024-12-19 13:47:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113679798779790200 2024-12-19 14:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo2p47vkt2a 2024-12-19 15:39:20+00:00| seen|...

CVE-2024-45818

The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the virtual VGA is in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the return from the function that acquired it. This behavior results in a problem when emulatin...

CVE-2024-45818

The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the virtual VGA is in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the return from the function that acquired it. This behavior results in a problem when emulatin...

CVE-2024-45818 Deadlock in x86 HVM standard VGA handling

The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the virtual VGA is in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the return from the function that acquired it. This behavior results in a problem when emulatin...

CVE-2024-12560

creationtimestamp| type| source ---|---|--- 2024-12-19 07:11:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113678240214070048 2024-12-19 08:57:54+00:00| seen| https://t.me/cvedetector/13308...

CVE-2023-23357

CVE-2023-23357 affects QNAP’s QuLog Center (various versions) with a cross-site scripting (XSS) flaw. The vulnerability arises in QuLog Center prior to fixed versions and could let an attacker with administrator access bypass security controls or read application data. Affected/fixed details per ...

CVE-2024-54982

The CVE-2024-54982 issue affects Quectel BC25 firmware version BC25PAR01A06, where authentication can be bypassed via a crafted NAS message. Root cause details in the connected PT-2024-36457 disclosure describe a NAS-based authentication bypass affecting BC25PAR01A06; no other product versions ar...

CVE-2022-44514

creationtimestamp| type| source ---|---|--- 2024-12-18 23:24:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113676404772632378 2024-12-19 02:15:20+00:00| seen| https://t.me/cvedetector/13289...

CVE-2024-39804

A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then ma...

CVE-2024-47039

In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47038

CVE-2024-47038 describes an out-of-bounds write in the function dhd_prot_flowrings_pool_release within dhd_msgbuf.c, caused by a missing bounds check. This can lead to local privilege escalation with no user interaction required. Documents collectively indicate a Linux/Android kernel context (Pix...

CVE-2024-56050 WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplmsplugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through 1.9.9.5.3...

CVE-2024-51646

creationtimestamp| type| source ---|---|--- 2024-12-18 11:44:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113673652217086692 2024-12-18 11:48:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113673666336880749 2024-12-18 13:41:43+00:00| seen| https://t.me/cvedetector/131...

gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...

gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...

CVE-2024-4464

creationtimestamp| type| source ---|---|--- 2024-12-18 06:04:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113672314021913810 2024-12-18 07:50:17+00:00| seen| https://t.me/cvedetector/13164...

CVE-2024-56170

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI manifests are listings of relevant files that clients are supposed to verify. Assuming everything else is correct, the most recent version of a manifest should be prioritized over other versions, to prevent...

CVE-2024-11254

CVE-2024-11254 (AMP for WP – Accelerated Mobile Pages, WordPress) Vulnerability: Reflected cross-site scripting via the disqus_name parameter. Affected product: AMP for WP plugin for WordPress. Impact: Unauthenticated attackers can inject arbitrary scripts into pages executed in user browsers whe...

CVE-2024-53580

iperf v3.17.1 was discovered to contain a segmentation violation via the iperfexchangeparameters function...

CVE-2024-56169

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying Parties such as Fort are supposed to maintain a backup cache of the remote RPKI data. This can be employed as a fallback in case a new fetch fails or yields incorrect files. However, the product currently...