PT-2024-8071 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a mechanism in Microsoft Windows called Windows Secure Kernel Mode, which has a problem with dereferencing an untrusted pointer. This can be exploited by a...

GHSA-5RMX-FJMC-MG6X

creationtimestamp| type| source ---|---|--- 2024-11-11 19:43:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113466030355098961...

GHSA-JJPH-C25G-5C7G

creationtimestamp| type| source ---|---|--- 2024-11-07 18:08:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113443005872447427...

Return Address Stack Side Channel

Bulletin ID: AMD-SB-7031 Potential Impact: N/A Severity: N/A Summary Researchers from the Google® Security Team have reported to AMD a new method of exploiting the previously reported CVE-2023-20569 “Inception” vulnerability on “Zen 3” and “Zen 4” based architectures. AMD believes that the...

PT-2024-34134 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned as affected. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a CVE candidate number, indicating that the...

CVE-2024-10755

creationtimestamp| type| source ---|---|--- 2024-11-04 05:13:57+00:00| seen| https://t.me/cvedetector/9693...

CVE-2024-37505 WordPress Business One Page theme <= 1.2.9 - Broken Access Control on Notice Dismissal vulnerability

Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through 1.2.9...

CVE-2024-10651

creationtimestamp| type| source ---|---|--- 2024-11-01 12:10:17+00:00| seen| https://t.me/cvedetector/9572...

Xingyuantu SparkShop 安全漏洞

Xingyuantu SparkShop is an open source shopping center from Xingyuantu, a Chinese company. A security vulnerability exists in Xingyuantu SparkShop 1.1.7 and earlier versions, which stems from vulnerability to a server-side request forgery SSRF attack that could allow an attacker to scan ports on...

CVE-2024-9607

The 10Web Social Post Feed plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts i...

CVE-2024-9607

The CVE CVE-2024-9607 affects the WordPress plugin 10Web Social Post Feed (versions

PT-2024-39713 · 10Web · 10Web Social Post Feed

Name of the Vulnerable Software and Affected Versions: 10Web Social Post Feed plugin for WordPress versions up to, and including, 1.2.9 Description: The issue arises from the use of add query arg without proper escaping on the URL, leading to Reflected Cross-Site Scripting. This allows...

BELL-CVE-2024-49892

Bulletin has no description...

BELL-CVE-2024-49885

Bulletin has no description...

CVE-2024-49325 WordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerability

Missing Authorization vulnerability in wpdiscover Photo Gallery Builder photo-gallery-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Photo Gallery Builder: from n/a through = 3.0...

The vulnerability of the gpf_notice component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the gpfnotice component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

WordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerability

Broken Access Control to Notice Dismissal vulnerability discovered by Marek Mikita Patchstack Alliance in WordPress Plugin Photo Gallery Builder versions = 3.0...

CVE-2024-8541

The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.6.5. Th...

CVE-2024-8541

The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.6.5. Th...

CVE-2024-8541

The Discount Rules for WooCommerce plugin (WordPress) is affected by a Reflected Cross-Site Scripting flaw in versions up to 2.6.5 due to insufficient escaping in add_query_arg. Exploitation requires an admin to click a link while the Leave a Review notice is present, enabling unauthenticated att...