CVE-2024-56050 WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplmsplugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through 1.9.9.5.3...

CVE-2024-51646

creationtimestamp| type| source ---|---|--- 2024-12-18 11:44:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113673652217086692 2024-12-18 11:48:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113673666336880749 2024-12-18 13:41:43+00:00| seen| https://t.me/cvedetector/131...

gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...

gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...

CVE-2024-4464

creationtimestamp| type| source ---|---|--- 2024-12-18 06:04:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113672314021913810 2024-12-18 07:50:17+00:00| seen| https://t.me/cvedetector/13164...

CVE-2024-56170

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI manifests are listings of relevant files that clients are supposed to verify. Assuming everything else is correct, the most recent version of a manifest should be prioritized over other versions, to prevent...

CVE-2024-11254

CVE-2024-11254 (AMP for WP – Accelerated Mobile Pages, WordPress) Vulnerability: Reflected cross-site scripting via the disqus_name parameter. Affected product: AMP for WP plugin for WordPress. Impact: Unauthenticated attackers can inject arbitrary scripts into pages executed in user browsers whe...

CVE-2024-56169

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying Parties such as Fort are supposed to maintain a backup cache of the remote RPKI data. This can be employed as a fallback in case a new fetch fails or yields incorrect files. However, the product currently...

CVE-2024-53580

iperf v3.17.1 was discovered to contain a segmentation violation via the iperfexchangeparameters function...

CVE-2024-51175

creationtimestamp| type| source ---|---|--- 2024-12-17 21:50:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113670373957707285 2024-12-18 00:18:42+00:00| seen| https://t.me/cvedetector/13140...

CVE-2024-29646

creationtimestamp| type| source ---|---|--- 2024-12-17 21:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113670348275480482 2024-12-18 00:18:41+00:00| seen| https://t.me/cvedetector/13138...

CVE-2024-56142

creationtimestamp| type| source ---|---|--- 2024-12-17 21:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113670348307536287 2024-12-18 00:18:40+00:00| seen| https://t.me/cvedetector/13137...

CVE-2024-12539 Elasticsearch Incorrect Authorization

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow...

CVE-2024-12539

Elasticsearch vulnerability CVE-2024-12539: improper authorization controls could bypass Document Level Security, allowing access to documents beyond user roles. Connected sources indicate affected Elastic Stack versions (notably referenced security update 8-16-2 to 8-17-0) and a security bulleti...

CVE-2024-55057

creationtimestamp| type| source ---|---|--- 2024-12-17 20:25:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113670039648933706 2024-12-17 23:28:25+00:00| seen| https://t.me/cvedetector/13131...

CVE-2024-12200

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:59+00:00| seen| https://t.me/cvedetector/13110 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1710/...

CVE-2024-49818 IBM Security Guardium Key Lifecycle Manager information disclosure

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2024-12179 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-36831

creationtimestamp| type| source ---|---|--- 2024-12-17 15:10:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113668798118318470 2024-12-17 16:46:36+00:00| seen| https://t.me/cvedetector/13098...

CVE-2024-10356

creationtimestamp| type| source ---|---|--- 2024-12-17 12:56:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113668272289530654 2024-12-17 15:06:15+00:00| seen| https://t.me/cvedetector/13092...