Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability previously existed in Mozilla Firefox version 134, which stemmed from a crash that could be exploited when segmenting specially crafted text, where the segmentation would corru...

WordPress WP Compress plugin <= 6.30.03 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin WP Compress versions = 6.30.03...

WordPress plugin WP Custom Admin Interface 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2026-2870

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ftrace functionality on MIPS architecture. A buffer overflow can occur when the kernel is located beyond 32 bits, due to the use of the UASM i LA most...

GHSA-RJ9M-QF65-F5GG

creationtimestamp| type| source ---|---|--- 2024-12-31 15:17:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113748100084170494...

CVE-2024-56265

creationtimestamp| type| source ---|---|--- 2024-12-31 10:41:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113747013123738714 2024-12-31 12:52:12+00:00| seen| https://t.me/cvedetector/13989...

CVE-2024-56235

creationtimestamp| type| source ---|---|--- 2024-12-31 10:41:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113747013095469324 2024-12-31 12:52:11+00:00| seen| https://t.me/cvedetector/13988...

CVE-2024-56213

creationtimestamp| type| source ---|---|--- 2024-12-31 10:05:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113746873154772102 2024-12-31 12:02:03+00:00| seen| https://t.me/cvedetector/13983...

CVE-2024-10044

creationtimestamp| type| source ---|---|--- 2024-12-30 11:54:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113741639003351841 2024-12-30 12:50:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113741858978390201 2024-12-30 14:17:31+00:00| seen|...

AZL-54692 CVE-2024-56738 affecting package grub2 2.06-16

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

SUSE CVE-2024-53146

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res...

Exploit for CVE-2024-7954

RCECVE-2024-7954- The porteplume plugin used by SPIP before...

DEBIAN-CVE-2024-53146

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res...

AZL-54945 CVE-2024-53146 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res...

Medium: python-requests

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...

CVE-2024-53143 fsnotify: Fix ordering of iput() and watched_objects decrement

In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix ordering of iput and watchedobjects decrement Ensure the superblock is kept alive until we're done with iput. Holding a reference to an inode is not allowed unless we ensure the superblock stays alive, which fsnotif...

UBUNTU-CVE-2024-53111

In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix address wraparound in movepagetables On 32-bit platforms, it is possible for the expression len + oldaddr include include include define ADDR1 void0x60000000 define ADDR2 void0x10000000 define SIZE 0x50000000uL int...

CVE-2024-53111 mm/mremap: fix address wraparound in move_page_tables()

In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix address wraparound in movepagetables On 32-bit platforms, it is possible for the expression len + oldaddr include include include define ADDR1 void0x60000000 define ADDR2 void0x10000000 define SIZE 0x50000000uL int...

DEBIAN-CVE-2024-8932

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

WordPress 404 Solution plugin <= 2.35.19 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Max Boll b0lli in WordPress Plugin 404 Solution versions = 2.35.19...