GHSA-R977-PRXV-HC43

creationtimestamp| type| source ---|---|--- 2024-11-24 01:50:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113535421553290812...

PT-2024-16311 · Google · Google For Woocommerce

Name of the Vulnerable Software and Affected Versions: Google for WooCommerce plugin for WordPress versions up to, and including, 2.8.6 Description: The issue is related to an Information Disclosure vulnerability due to a publicly accessible print php information.php file. This allows...

GHSA-XWMX-MMRF-HQF9

creationtimestamp| type| source ---|---|--- 2024-11-15 18:28:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113488382438414219...

RHEL 9 : libgcrypt (RHSA-2024:9404)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9404 advisory. The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: libgcrypt: vulnerable to Marvin...

GHSA-C2F5-JXJV-2HH8

creationtimestamp| type| source ---|---|--- 2024-11-05 21:19:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113432431807385293...

Fortinet FortiWeb - Multiple command injection vulnerabilities (FG-IR-21-157)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-157 advisory. - Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through...

EulerOS Virtualization 2.12.0 : python-lxml (EulerOS-SA-2024-2777)

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An XML External Entity XXE vulnerability in the ebookmeta.getmetadata function of lxml before v4.9.1 allows attackers to access...

BELL-CVE-2024-49856

Bulletin has no description...

BELL-CVE-2024-47710

Bulletin has no description...

BELL-CVE-2024-50041

Bulletin has no description...

BELL-CVE-2024-47755

Bulletin has no description...

BELL-CVE-2024-46834

Bulletin has no description...

PT-2024-38866 · Palo Alto Networks · Prisma Access Browser

Name of the Vulnerable Software and Affected Versions: Prisma Access Browser affected versions not specified Description: A vulnerability alert has been issued for Prisma Access Browser. The issue is related to a monthly vulnerability update. No specific details about the vulnerability, affected...

BELL-CVE-2024-41096

Bulletin has no description...

CVE-2024-37031

The CVE-2024-37031 entry describes a stored XSS vulnerability in Active Admin (Ruby on Rails) before 3.2.2, triggered when users create entities with arbitrary names used as dynamic form legends. The root cause is the dynamic name value being reflected in admin forms, enabling an attacker to inje...

BELL-CVE-2023-52862

Bulletin has no description...

PT-2024-25763 · Konga · Konga

Name of the Vulnerable Software and Affected Versions: Konga version 0.14.9 Description: The issue allows for Cross Site Scripting XSS via the username parameter. Recommendations: For Konga version 0.14.9, avoid using the username parameter until the issue is resolved...

BELL-CVE-2024-27016

Bulletin has no description...

Mageia: Security Advisory (MGASA-2024-0148)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BELL-CVE-2024-26825

Bulletin has no description...