The Year in Review 2024: Today’s Insights, Tomorrow’s Outlook

...

CVE-2024-36616

creationtimestamp| type| source ---|---|--- 2024-11-29 18:41:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113567706088793753 2025-10-16 07:46:53+00:00| seen| https://gist.github.com/Darkcrai86/d4b1a38863b6a56fd60b4594084a9b41...

AZL-53453 CVE-2024-53859 affecting package gh for versions less than 2.62.0-5

go-gh is a Go module for interacting with the gh utility and the GitHub API from the command line. A security vulnerability has been identified in go-gh that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a codespace. go-gh sources authentication tokens...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

OpenVidReview 跨站脚本漏洞

OpenVidReview is a collaborative video review and annotation tool by the individual developer davidguva. A cross-site scripting vulnerability exists in OpenVidReview version 1.0, which stems from vulnerability to cross-site scripting attacks in the review name...

CVE-2024-53253

Sentry is an error tracking and performance monitoring platform. Version 24.11.0, and only version 24.11.0, is vulnerable to a scenario where a specific error message generated by the Sentry platform could include a plaintext Client ID and Client Secret for an application integration. The Client ...

CVE-2024-53253

CVE-2024-53253 affects Sentry v24.11.0 (self-hosted); a specific error message could leak plaintext integration Client ID and Client Secret in an HTTP response when a failing third‑party response triggers select-requester.invalid-response during a Search UI async flow. The leak does not grant dat...

GHSA-C2R5-CFQR-C553

creationtimestamp| type| source ---|---|--- 2024-11-18 17:39:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113505179980465800...

PT-2024-16833

Name of the Vulnerable Software and Affected Versions EasyPHP version 14.1 Description The issue is an absolute path traversal vulnerability, which could allow remote users to bypass SecurityManager restrictions and retrieve any file stored on the server. This is achieved by setting consecutive...

Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download Vulnerabilities

Siemens Energy Omnivise T3000 version 8.2 SP3 suffers from local privilege escalation, cleartext storage of passwords in configuration and log files, file system access allowing for arbitrary file download, and IP whitelist bypass...

Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Siemens Energy Omnivise T3000 vulnerable version: =8.2 SP3 fixed version: see solution section CVE number: CVE-2024-38876, CVE-2024-3887...

GHSA-V7VF-F5Q6-M899 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2024-43643

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 20:11:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113471799925402298 2025-01-09 17:19:03+00:00| seen|...

CVE-2024-49013

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 21:41:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113472154201097723 2026-07-04 02:07:07+00:00| seen|...

CVE-2024-43628

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:10:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113471563737225141 2025-01-09 17:17:11+00:00| seen|...

CVE-2024-48993

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 20:26:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113471858976758406 2026-07-04 12:07:07+00:00| seen|...

CVE-2024-43637

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:40:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113471681854033023 2025-01-09 17:18:30+00:00| seen|...

CVE-2024-49014

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 21:41:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113472154215134295 2026-07-04 02:37:07+00:00| seen|...

CVE-2024-43462

creationtimestamp| type| source ---|---|--- 2024-11-12 18:25:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113471386543098479 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2026-07-04 16:37:07+00:00| seen|...