CVE-2024-6096

In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object injection via an insecure type resolution vulnerability...

CVE-2024-37179

SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application...

MariaDB 11.4.0 < 11.4.5

The version of MariaDB installed on the remote host is prior to 11.4.5. It is, therefore, affected by a vulnerability as referenced in the 11.4.5 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4...

CVE-2024-0832

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...

CVE-2024-0213

A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service DoS, through exploiting a memory corruption issue in the TA service, which runs as root. This may also result in the disabling of event...

CVE-2024-8014

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible through object injection via an insecure type resolution vulnerability...

CVE-2024-8048

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible using object injection via insecure expression evaluation...

CVE-2025-0509

creationtimestamp| type| source ---|---|--- 2025-02-04 20:13:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113947442188091904 2025-02-04 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheuqt3inl27 2025-02-04 22:15:18+00:00| seen|...

Python Library Django 4.2.x < 4.2.18 / 5.0.x < 5.0.11 / 5.1.x < 5.1.5 DoS

The detected version of the Django Python package, Django, is 4.2.x prior to 4.2.18, 5.0.x prior to 5.0.11 or 5.1.x prior to 5.1.5. It is, therefore, affected by a denial of service vulnerability as disclosed in Django's January 14th 2025 security advisory. A lack of upper bound limit enforcement...

CVE-2025-24371 Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the blocksync protocol peers send their base and latest heights when they connect to a new node A, which is syncing to the tip of a network. base acts as a lower ground and informs A that the...

CVE-2025-24371 Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the blocksync protocol peers send their base and latest heights when they connect to a new node A, which is syncing to the tip of a network. base acts as a lower ground and informs A that the...

CVE-2025-20637

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaonv5fbp2c 2025-02-03 07:46:48+00:00| seen| https://t.me/cvedetector/17046 2025-02-03 08:03:49+00:00| seen|...

CVE-2024-13216

creationtimestamp| type| source ---|---|--- 2025-01-31 05:23:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113921294156429587 2025-01-31 06:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdx2lmwe2n 2025-01-31 07:24:19+00:00|...

CVE-2024-12444

creationtimestamp| type| source ---|---|--- 2025-01-30 14:16:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodnhyp32f 2025-01-30 14:16:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113917730431983422...

CVE-2024-12299

creationtimestamp| type| source ---|---|--- 2025-01-30 14:16:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodio7ii2t 2025-01-30 14:16:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113917730403182409...

CVE-2025-23007

creationtimestamp| type| source ---|---|--- 2025-01-30 09:45:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113916663254527555 2025-01-30 11:18:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3471 2025-01-30 11:25:40+00:00| seen|...

snowflake-connector-python vulnerable to SQL Injection in write_pandas

Issue Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function from the snowflake.connector.pandastools module is vulnerable to SQL injection. This vulnerability affects versions 2.2.5 through 3.13.0. Snowflake fixed the issue in version 3.13.1...

CVE-2024-10001

A Code Injection vulnerability was identified in GitHub Enterprise Server that allowed attackers to inject malicious code into the query selector via the identity property in the message handling function. This enabled the exfiltration of sensitive data by manipulating the DOM, including...

CVE-2025-24789

creationtimestamp| type| source ---|---|--- 2025-01-29 17:47:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113912895243480427 2025-01-29 18:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvlavortv2c 2025-01-29 19:11:17+00:00|...

CVE-2025-0784

creationtimestamp| type| source ---|---|--- 2025-01-28 20:08:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113907786969460977 2025-01-28 20:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbjacphu2t 2025-01-28 22:58:15+00:00| seen|...