865 matches found
CVE-2024-54410
Cross-Site Request Forgery CSRF vulnerability in eagerterrier SOPA Blackout sopa-blackout allows Stored XSS.This issue affects SOPA Blackout: from n/a through = 1.4...
GitLab 15.0 < 17.4.6 / 17.5 < 17.5.4 / 17.6 < 17.6.2 (CVE-2024-8650)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue was discovered in GitLab CE/EE affecting all versions from 15.0 prior to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2 that allowed non-member users to view unresolved threads marked...
CVE-2024-45709
SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...
Veeam Backup & Replication 安全漏洞
Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication 12.2.0.334 and previous 12.X versions, which stems from a vulnerability that allows the exposure of saved credentials by leveraging a combination of method...
CVE-2024-25020
IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to malicious file upload by allowing unrestricted filetype attachments in the Journal entry page. Attackers can make use of this weakness and upload malicious executable files into the system and can be sent to victims for performing further...
The vulnerability of the 1C-Bitrix website content management system, related to insufficient protection of registration data, allows a hacker to gain access to authentication data from the proxy server.
The vulnerability of the 1C-Bitrix website content management system CMS is related to insufficient protection of registration data, allowing attackers to gain access to authentication data from the proxy server...
CVE-2024-9859
creationtimestamp| type| source ---|---|--- 2024-10-11 19:33:27+00:00| seen| https://t.me/cvedetector/7715 2026-07-06 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpx4cw55an2r...
CVE-2024-9782
creationtimestamp| type| source ---|---|--- 2024-10-10 15:05:12+00:00| seen| https://t.me/cvedetector/7599 2026-07-12 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqgj6cg6gm2n...
CVE-2024-9623
creationtimestamp| type| source ---|---|--- 2024-10-10 13:24:34+00:00| seen| https://t.me/cvedetector/7577 2024-10-10 15:20:05+00:00| seen| https://t.me/truesecator/6305 2024-10-11 12:24:01+00:00| seen| https://vulnerability.circl.lu/bundle/db9dd42d-746e-40cf-bae6-61042f0c1d48...
CVE-2024-44040
creationtimestamp| type| source ---|---|--- 2024-10-06 15:43:25+00:00| seen| https://t.me/cvedetector/7177...
PT-2024-39671 · Netadmin · Netadmin Iam
Name of the Vulnerable Software and Affected Versions: Netadmin Software NetAdmin IAM versions up to 3.5 Description: A vulnerability was found in the HTTP POST Request Handler component, specifically affecting the /controller/api/Answer/ReturnUserQuestionsFilled file. The manipulation of the...
WordPress Email Subscribers & Newsletters plugin <= 5.7.34 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability
Missing Authorization to Authenticated Subscriber+ Sensitive Information Exposure vulnerability discovered by Michelle Porter in WordPress Plugin Email Subscribers & Newsletters versions = 5.7.34...
The vulnerability of the HCI_AMP component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the HCIAMP component in the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-9076
creationtimestamp| type| source ---|---|--- 2024-09-22 04:21:51+00:00| seen| https://t.me/cvedetector/6145...
BELL-CVE-2024-46799
Bulletin has no description...
CVE-2024-44169
creationtimestamp| type| source ---|---|--- 2024-09-17 03:04:41+00:00| seen| https://t.me/cvedetector/5792...
CVE-2024-44191
creationtimestamp| type| source ---|---|--- 2024-09-17 03:04:19+00:00| seen| https://t.me/cvedetector/5775...
Exposure Of Sensitive Information To An Unauthorized Actor
libzpehyr.so is vulnerable to Exposure Of Sensitive Information To An Unauthorized Actor. The vulnerability is due to improper handling of encryption procedure status codes, which allows a custom-made remote controller to incorrectly indicate success even when encryption requests are rejected...