Lucene search
+L

11457 matches found

Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.17 views

PT-2024-16707 · Grand Vice Info · Webopac

Name of the Vulnerable Software and Affected Versions: Webopac from Grand Vice info affected versions not specified Description: The issue is a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code in the user's browser throug...

6.1CVSS7.3AI score0.00333EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2024/11/11 12:00 a.m.14 views

Grand Vice info Webopac 代码问题漏洞

Grand Vice info Webopac is an online public access catalog from China XinXueYing Info Grand Vice info. It is used for users to access library services over the Internet. A code issue vulnerability exists in Grand Vice info Webopac versions 6.x prior to 6.5.1 and 7.x prior to 7.2.3, which stems fr...

8.8CVSS7.9AI score0.00767EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.16 views

PT-2024-16704 · Grand Vice Info · Webopac

Name of the Vulnerable Software and Affected Versions: Webopac from Grand Vice info affected versions not specified Description: The issue is a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS8.3AI score0.00558EPSS
SaveExploits0References16
Circl
Circl
added 2024/11/09 2:32 p.m.15 views

CVE-2024-51599

creationtimestamp| type| source ---|---|--- 2024-11-09 14:32:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113453480875171268 2024-11-09 17:16:31+00:00| seen| https://t.me/cvedetector/10396...

6.5CVSS4.8AI score0.00255EPSS
SaveExploits0References2
Circl
Circl
added 2024/11/09 2:11 p.m.11 views

CVE-2024-51612

creationtimestamp| type| source ---|---|--- 2024-11-09 14:11:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113453400143800802 2024-11-09 16:26:17+00:00| seen| https://t.me/cvedetector/10387...

6.5CVSS4.8AI score0.00248EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/09 11:15 a.m.6 views

DEBIAN-CVE-2024-50257

In the Linux kernel, the following vulnerability has been resolved: netfilter: Fix use-after-free in getinfo ip6tablenat module unload has refcnt warning for UAF. call trace is: WARNING: CPU: 1 PID: 379 at kernel/module/main.c:853 moduleput+0x6f/0x80 Modules linked in: ip6tablenat- CPU: 1 UID: 0...

7.8CVSS6.5AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/09 11:15 a.m.16 views

AZL-53304 CVE-2024-50257 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: Fix use-after-free in getinfo ip6tablenat module unload has refcnt warning for UAF. call trace is: WARNING: CPU: 1 PID: 379 at kernel/module/main.c:853 moduleput+0x6f/0x80 Modules linked in: ip6tablenat- CPU: 1 UID: 0...

7.8CVSS7AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/09 11:15 a.m.22 views

UBUNTU-CVE-2024-50257

In the Linux kernel, the following vulnerability has been resolved: netfilter: Fix use-after-free in getinfo ip6tablenat module unload has refcnt warning for UAF. call trace is: WARNING: CPU: 1 PID: 379 at kernel/module/main.c:853 moduleput+0x6f/0x80 Modules linked in: ip6tablenat- CPU: 1 UID: 0...

7.8CVSS6.6AI score0.00256EPSS
SaveExploits0References34
Circl
Circl
added 2024/11/09 7:36 a.m.11 views

CVE-2024-10547

creationtimestamp| type| source ---|---|--- 2024-11-09 07:36:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113451845298617004 2024-11-09 09:56:30+00:00| seen| https://t.me/cvedetector/10284...

9.8CVSS8.7AI score0.00853EPSS
SaveExploits0References2
Circl
Circl
added 2024/11/09 2:54 a.m.16 views

CVE-2024-8960

creationtimestamp| type| source ---|---|--- 2024-11-09 02:54:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113450738805693447 2024-11-09 04:55:21+00:00| seen| https://t.me/cvedetector/10259 2025-01-29 22:11:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3415...

6.4CVSS8.7AI score0.00303EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/09 12:00 a.m.7 views

WordPress plugin Debug Tool 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.1AI score0.00285EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/09 12:00 a.m.17 views

PT-2024-34713 · Odihost · Odihost Easy Gallery

Name of the Vulnerable Software and Affected Versions: Odihost Easy Gallery versions 1.4 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

8.5CVSS8AI score0.00395EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/11/09 12:00 a.m.20 views

PT-2024-34322 · Micah Blu · Micah Blu Rsvp Me

Name of the Vulnerable Software and Affected Versions: Micah Blu RSVP ME versions 1.9.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper handling of special elements in an SQL command. This allows for SQL Injection attacks. Recommendations: For Micah...

8.5CVSS8AI score0.00395EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2024/11/08 3:48 a.m.8 views

SUSE CVE-2024-50163

In the Linux kernel, the following vulnerability has been resolved: bpf: Make sure internal and UAPI bpfredirect flags don't overlap The bpfredirectinfo is shared between the SKB and XDP redirect paths, and the two paths use the same numeric flag values in the ri-flags field specifically,...

4.7CVSS7.7AI score0.00216EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
added 2024/11/08 12:00 a.m.13 views

The vulnerability of the advansys component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the advansys component in the Linux operating system’s kernel is related to a memory leak in the ascprtadvboardinfo function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00226EPSS
SaveExploits0References25Affected Software3
OSV
OSV
added 2024/11/07 10:15 a.m.9 views

DEBIAN-CVE-2024-50161

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the remaining infocnt before repeating btf fields When trying to repeat the btf fields for array of nested struct, it doesn't check the remaining infocnt. The following splat will be reported when the value of ret nele...

5.5CVSS4.9AI score0.002EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/07 10:15 a.m.11 views

UBUNTU-CVE-2024-50142

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validation introduced in commit 07bf7908950a "xfrm: Validate address prefix lengths in the xfrm selector." syzbot created an SA with...

5.5CVSS6.2AI score0.00259EPSS
SaveExploits0References48
Vulnrichment
Vulnrichment
added 2024/11/07 9:31 a.m.4 views

CVE-2024-50161 bpf: Check the remaining info_cnt before repeating btf fields

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the remaining infocnt before repeating btf fields When trying to repeat the btf fields for array of nested struct, it doesn't check the remaining infocnt. The following splat will be reported when the value of ret nele...

7.8CVSS7.6AI score0.002EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/07 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the bpf component internally overlapping with the UAPI bpfredirect flag when processing bpfredirectinfo...

5.5CVSS6.8AI score0.00216EPSS
SaveExploits0References7
OSV
OSV
added 2024/11/06 3:15 a.m.17 views

CVE-2024-49405

Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a specific scenario...

4.6CVSS5.8AI score0.00233EPSS
SaveExploits0References1
Rows per page
Query Builder