CVE-2024-9134: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges...

Arista NG Firewall 安全漏洞

Arista NG Firewall is a WEB firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista NG Firewall that originates from a user with advanced reporting application access rights can perform unauthorized actions...

PT-2025-3710 · Arista · Arista Edge Threat Management

Name of the Vulnerable Software and Affected Versions: Arista Edge Threat Management versions up to 17.1.1 Description: Multiple SQL Injection vulnerabilities exist in the reporting application, allowing a user with advanced report application access rights to exploit the SQL injection. This...

CVE-2024-13263

creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdimvng6c2e...

GHSA-C9CX-GHWR-X58M

creationtimestamp| type| source ---|---|--- 2025-01-09 19:23:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1040...

GHSA-7RGP-4J56-FM79 Mattermost has Improper Check for Unusual or Exceptional Conditions

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2025-22445

CVE-2025-22445 affects Mattermost Server in the 10.x line up to 10.2 where the UI incorrectly reflects missing admin settings for the Calls feature, causing admin confusion. SUSE advisory SUSE-SU-2025:0297-1 documents the issue and recommends updating to OpenSUSE/Mattermost patch level 10.3 or la...

PT-2025-4489 · Mattermost +1 · Mattermost +1

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.x through 10.2 Description: The issue arises from Mattermost's failure to accurately reflect missing settings, leading to confusion among administrators regarding a Calls security-sensitive configuration due to incorrec...

CVE-2025-22445: Improper Check for Unusual or Exceptional Conditions

Mattermost versions 10.x = 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting...

CVE-2024-13191

creationtimestamp| type| source ---|---|--- 2025-01-08 22:34:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113795117051195743 2025-01-08 23:13:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/852 2025-01-08 23:15:31+00:00| seen|...

CVE-2024-56774

creationtimestamp| type| source ---|---|--- 2025-01-08 17:52:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113794007433747830 2025-01-08 18:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfargy6tdm25 2025-01-08 18:22:41+00:00|...

Security Bulletin: Multiple Vulnerabilities in moment.js used by IBM Jazz Reporting Service (JRS) (CVE-2022-24785, CVE-2017-18214, CVE-2016-4055, CVE-2022-31129)

Summary There are multiple vulnerabilities identified in IBM Jazz Reporting Service JRS. These vulnerabilities have been fixed. Please apply the latest version to obtain the fixes. Vulnerability Details CVEID:CVE-2022-24785 DESCRIPTION: Moment.js could allow a remote attacker to traverse...

CVE-2024-54731

creationtimestamp| type| source ---|---|--- 2025-01-08 05:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ftspo2c2f 2025-01-08 05:38:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf7h4oxlyz2r 2025-01-08 05:41:00+00:00|...

CVE-2024-56456

creationtimestamp| type| source ---|---|--- 2025-01-08 03:32:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113790627182992909 2025-01-08 03:38:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/616 2025-01-08 04:16:18+00:00| seen|...

CVE-2024-40427

creationtimestamp| type| source ---|---|--- 2025-01-07 18:35:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113788514243444533 2025-01-07 18:37:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/503 2025-01-07 19:15:53+00:00| seen|...

CVE-2025-22299

creationtimestamp| type| source ---|---|--- 2025-01-07 11:17:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jljbgih2m 2025-01-07 11:17:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jljbgih2m 2025-01-07 13:25:20+00:00| seen|...

CVE-2024-49249

creationtimestamp| type| source ---|---|--- 2025-01-07 10:55:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113786703677090826 2025-01-07 11:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5jijlme22o 2025-01-07 11:37:46+00:00| seen|...

CVE-2024-12313

creationtimestamp| type| source ---|---|--- 2025-01-07 04:39:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/327 2025-01-07 05:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhhhji425 2025-01-07 05:48:09+00:00| seen|...