CVE-2024-12558

creationtimestamp| type| source ---|---|--- 2024-12-21 09:42:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113690158402957170 2024-12-21 10:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldso7dstzc2k 2024-12-21 11:59:18+00:00| seen|...

CVE-2024-56337

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be...

CVE-2024-12801

Server-Side Request Forgery SSRF in SaxEventRecorder by QOS.CH logback version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the modification of DOCTYPE declaration in XML...

CVE-2024-12798

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

CVE-2024-9101

A reflected cross-site scripting XSS vulnerability in the 'Entry Chooser' of phpLDAPadmin version 1.2.1 through the latest version, 1.2.6.7 allows attackers to execute arbitrary JavaScript in the user's browser via the 'element' parameter, which is unsafely passed to the JavaScript 'eval' functio...

CVE-2024-45338

creationtimestamp| type| source ---|---|--- 2024-12-18 22:54:12+00:00| seen| https://t.me/cvedetector/13253 2025-01-28 13:36:28+00:00| seen| https://gist.github.com/cwayne18/3da2b9bf101aefc5a7f783c55023b8af 2025-02-21 18:19:01+00:00| published-proof-of-concept|...

RHSA-2024:11185 Red Hat Security Advisory: edk2:20220126gitbb1bba3d77 security update

Bulletin has no description...

CVE-2024-50379

Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write non-default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from...

CVE-2024-11999

creationtimestamp| type| source ---|---|--- 2024-12-17 09:15:27+00:00| seen| https://t.me/cvedetector/13071 2025-01-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-010-02...

CVE-2024-55627

creationtimestamp| type| source ---|---|--- 2024-12-16 12:57:32+00:00| seen| https://t.me/truesecator/6543 2024-12-19 13:01:33+00:00| seen| https://t.me/ptescalator/199 2025-01-06 17:56:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113782699139664116 2025-01-06 18:15:59+00:00| seen|...

CVE-2024-55628

creationtimestamp| type| source ---|---|--- 2024-12-16 12:57:32+00:00| seen| https://t.me/truesecator/6543 2024-12-19 13:01:33+00:00| seen| https://t.me/ptescalator/199 2025-01-06 18:04:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113782729492440784 2025-01-06 18:16:02+00:00| seen|...

CVE-2024-55605

creationtimestamp| type| source ---|---|--- 2024-12-16 12:57:32+00:00| seen| https://t.me/truesecator/6543 2024-12-19 13:01:33+00:00| seen| https://t.me/ptescalator/199 2025-01-06 17:13:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113782530465783993 2025-01-06 17:16:03+00:00| seen|...

CVE-2024-55626

creationtimestamp| type| source ---|---|--- 2024-12-16 12:57:32+00:00| seen| https://t.me/truesecator/6543 2024-12-19 13:01:33+00:00| seen| https://t.me/ptescalator/199 2025-01-06 17:51:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113782677525284582 2025-01-06 18:15:57+00:00| seen|...

Oracle Siebel Server <= 23.7 (January 2024 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the January 2024 CPU advisory. - Vulnerability in the Siebel CRM product of Oracle Siebel CRM component: EAI Jettison. Supported versions that are affected are Prior to 23.8. Easily...

Oracle Siebel Server <= 19.7 (January 2020 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the January 2020 CPU advisory. - Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: UIF Open UI. Supported versions that are affected are 19.7 and prior...

Oracle Siebel Server < 19.11 (January 2020 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2020 CPU advisory. - Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI jackson-databind. Supported versions that are affected are...

Oracle Siebel CRM (January 2013 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2013 CPU advisory. - Vulnerability in the Siebel CRM component of Oracle Siebel CRM subcomponent: Siebel Calendar. Supported versions that are affected are 8.1.1 an...

Oracle Siebel Server <= 19.8 (January 2020 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the January 2020 CPU advisory. - Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: EAI jackson-databind. Supported versions that are affected are 19.10 an...

Oracle Siebel Server < 16.18 / 17.0 < 17.3 (January 2018 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the January 2018 CPU advisory. - Vulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM subcomponent: Outlook Client. Supported versions that are affected are 17.3 and...

Oracle Siebel CRM (January 2014 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2014 CPU advisory. - Vulnerability in the Siebel Life Sciences component of Oracle Siebel CRM subcomponent: Clinical Trip Report. Supported versions that are affect...