CVE-2024-39273

A firmware update vulnerability exists in the fwcheck.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...

CVE-2024-12616 Bitly's WordPress Plugin <= 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Bitlys WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 2.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

WordPress Bitly plugin <= 2.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update vulnerability

Missing Authorization to Authenticated Subscriber+ Settings Update vulnerability discovered by Lucio Sá in WordPress Plugin Bitly versions = 2.7.3...

Security update for python-django-ckeditor (moderate)

openSUSE Security Update: Security update for python-django-ckeditor Announcement ID: openSUSE-SU-2025:0008-1 Rating: moderate References: 1219720 Cross-References: CVE-2024-24815 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description...

CVE-2024-11946 iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability

iXsystems TrueNAS CORE fetchpluginpackagesites tar Cleartext Transmission of Sensitive Information Vulnerability. This vulnerability allows network-adjacent attackers to tamper with firmware update files on affected installations of iXsystems TrueNAS devices. Authentication is not required to...

CVE-2024-11812

CVE-2024-11812 involves the WordPress plugin “Wtyczka SeoPilot dla WP” where Cross-Site Request Forgery is possible in all versions up to 3.3.091 due to missing or incorrect nonce validation in SeoPilot_Admin_Options(). The result is that unauthenticated attackers can update plugin settings and i...

CVE-2024-44231

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to bypass Login Window during a software update...

WordPress Maintenance & Coming Soon Redirect Animation plugin <= 2.1.3 - Missing Authorization to Settings Update vulnerability

Missing Authorization to Settings Update vulnerability discovered by Francesco Carlucci in WordPress Plugin Maintenance & Coming Soon Redirect Animation versions = 2.1.3...

RLSA-2024:10219 Moderate: perl-App-cpanminus:1.7044 security update

The panminus is a script to get, unpack, build and install modules from CPAN. Security Fixes: perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability CVE-2024-45321 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

CVE-2024-48889

creationtimestamp| type| source ---|---|--- 2024-12-18 12:48:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113673904046655801 2024-12-18 15:22:11+00:00| seen| https://t.me/cvedetector/13202 2024-12-18 20:19:24+00:00| seen|...

Fedora: Security Advisory (FEDORA-2024-811cffc4ef)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5829-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50186)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50186 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, wh...

Debian: Security Advisory (DSA-5830-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-10772

The CVE-2024-10772 entry describes a firmware-update integrity issue in SICK InspectorP61x and InspectorP62x (and related TiM3xx families). The root cause is unvalidated firmware updates that allow an attacker to install modified firmware on the device, potentially compromising confidentiality, i...

The vulnerability of SAP NetWeaver Java software update, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP NetWeaver Java software update manager is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

[SECURITY] [DLA 3974-1] dnsmasq security update

From: Lee Garrett [email protected] To: [email protected] Subject: SECURITY DLA 3974-1 dnsmasq security update - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3974-1 [email protected]...

Digital China Networks多款产品 安全漏洞

Digital China Networks DCME-520 DCN DCME-520 and others are products of Digital China Networks China.Digital China Networks DCME-520 is a new generation of high-performance security gateway with multi-core high performance. Digital China Networks DCME-320 DCN DCME-320 is a wireless router.Digital...

[SECURITY] [DLA 3967-1] mpg123 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3967-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 26, 2024 https://wiki.debian.org/LTS -...

WordPress WP Travel Engine plugin <= 6.2.1 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update vulnerability

Missing Authorization to Authenticated Contributor+ Plugin Settings Update vulnerability discovered by Noah Stead TurtleBurg in WordPress Plugin WP Travel Engine versions = 6.2.1...