RHSA-2024:1676

creationtimestamp| type| source ---|---|--- 2024-11-17 10:25:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113497810158138244 2025-02-27 11:25:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5664 2025-06-25 00:49:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19413...

CVE-2017-18590

creationtimestamp| type| source ---|---|--- 2024-11-16 21:58:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-18590.yaml...

GHSA-HRXH-9W67-G4CV

creationtimestamp| type| source ---|---|--- 2024-11-15 17:17:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113488105450265203...

PT-2024-9641 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to inject malicious scripts into vulnerable form fields. This cou...

PT-2024-9631 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. An attacker could exploit this to inject malicious scripts into vulnerable form fields, allowing...

CVE-2020-15228

creationtimestamp| type| source ---|---|--- 2024-11-14 06:07:13+00:00| seen| MISP/f4c18b78-4cca-4231-b957-1490787689a1 2026-07-29 12:01:07+00:00| seen| https://t.me/hnbestcomments/6341 2026-07-30 00:01:47+00:00| seen| https://t.me/hnbestcomments/6341 2026-08-01 08:00:04+00:00| seen|...

Medium: nodejs20

Issue Overview: A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used. This flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actor...

DInGO dLibra 跨站脚本漏洞

DInGO dLibra is a digital library system from DInGO, Inc. A cross-site scripting vulnerability exists in DInGO dLibra versions 6.0 through prior to 6.3.20, which stems from the presence of Reflective Cross-Site Scripting XSS, where an attacker may be able to use a crafted URL to cause the script ...

CVE-2024-32044

creationtimestamp| type| source ---|---|--- 2024-11-13 22:58:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113478118985817750...

CVE-2024-23919

creationtimestamp| type| source ---|---|--- 2024-11-13 21:27:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113477764742829052...

WordPress CSV to html plugin <= 3.26 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin CSV to html versions = 3.26...

CVE-2024-8937

creationtimestamp| type| source ---|---|--- 2024-11-13 07:28:16+00:00| seen| https://t.me/cvedetector/10800 2024-11-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-04 2024-11-22 08:36:58+00:00| seen| https://t.me/icscert/963...

CVE-2024-48998

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 20:41:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113471918032805741 2026-07-04 08:07:07+00:00| seen|...

CVE-2024-49046

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:44:14+00:00| seen| https://t.me/cvedetector/10680 2024-11-12 22:56:10+00:00| seen|...

CVE-2024-43631

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:25:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113471622766432595 2025-01-09 17:17:51+00:00| seen|...

CVE-2024-43627

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:10:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113471563720812052 2025-01-09 17:16:36+00:00| seen|...

CVE-2024-9836

creationtimestamp| type| source ---|---|--- 2024-11-12 06:06:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113468480752075746 2024-11-12 08:00:10+00:00| seen| https://t.me/cvedetector/10588...

Rockwell Automation FactoryTalk Updater 安全漏洞

Rockwell Automation FactoryTalk Updater is a secure tool from Rockwell Automation, Inc. for managing Rockwell Automation software versions and activations on networked computers. A security vulnerability exists in Rockwell Automation FactoryTalk Updater versions prior to v4.20.00, which stems fro...

November 12, 2024-KB5046542 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

Microsoft SQL Server 资源管理错误漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A resource management error vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products a...