CVE-2024-6977

creationtimestamp| type| source ---|---|--- 2024-07-31 20:11:01+00:00| seen| https://t.me/cvedetector/2156...

CVE-2024-7285

creationtimestamp| type| source ---|---|--- 2024-07-31 06:47:56+00:00| seen| https://t.me/cvedetector/2094...

CVE-2024-42229

creationtimestamp| type| source ---|---|--- 2024-07-30 10:43:12+00:00| seen| https://t.me/cvedetector/2001 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

PT-2024-28780

Name of the Vulnerable Software and Affected Versions GraphQL Java versions prior to 21.5 GraphQL Java version 20.9 GraphQL Java version 19.11 Description The issue is related to the improper consideration of ExecutableNormalizedFields ENFs in preventing denial of service via introspection querie...

CVE-2024-41090

creationtimestamp| type| source ---|---|--- 2024-07-29 09:36:08+00:00| seen| https://t.me/cvedetector/1818 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CVE-2024-7201

creationtimestamp| type| source ---|---|--- 2024-07-29 06:15:18+00:00| seen| https://t.me/cvedetector/1794...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager EPM version 2024, which stems from the presence of a SQL injection vulnerability that allows an authenticated attacker within the same...

WithSecure Elements 安全漏洞

WithSecure Elements is an online tool from the Finnish company WithSecure. It is used to transform data into customizable and informative reports and dashboards. A security vulnerability exists in WithSecure Elements version 23.x and earlier versions. An attacker can elevate privileges by...

VulnCheck KEV: CVE-2022-25064

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a remote code execution RCE vulnerability via the function oalwan6setIpAddr...

CVE-2024-3246

creationtimestamp| type| source ---|---|--- 2024-07-24 07:27:10+00:00| seen| https://t.me/cvedetector/1539 2024-07-24 12:40:48+00:00| seen| https://t.me/HackingInsights/7218...

AZL-46972 CVE-2024-0760 affecting package bind for versions less than 9.20.0-1

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0...

USN-6905-1 ruby-rack vulnerabilities

It was discovered that Rack incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. CVE-2023-27539 It was discovered that Rack incorrectly handled Multipart MIME parsing. A remote attacker...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

NI I/O Trace Tool 安全漏洞

NI I/O Trace Tool National Instruments I/O Trace Tool is a utility program from National Instruments NI. It can be used to view ongoing VISA driver calls, parameters passed to the VISA driver calls, and results. A security vulnerability exists in NI I/O Trace Tool version 24.3 and earlier, which...

Adobe Experience Manager 输入验证错误漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...

CVE-2024-5973

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have...

PT-2024-37867 · National Instruments · Ni Veristand

Name of the Vulnerable Software and Affected Versions: NI VeriStand versions prior to 2024 Q2 Description: A deserialization of untrusted data issue exists in NI VeriStand DataLogging Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially...

CVE-2024-23475

creationtimestamp| type| source ---|---|--- 2024-07-17 18:13:07+00:00| seen| https://t.me/cvedetector/1086...

CVE-2024-5251

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimatepricing shortcode in all versions up to, and including, 3.19.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...

UBUNTU-CVE-2024-21141

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...