563 matches found
CVE-2025-21319
CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...
CVE-2025-0458
CVE-2025-0458 affects Virtual Computer Vysual RH Solution 2024.12.1, where the Login Panel’s /index.php contains vulnerable functionality. The described issue arises from manipulating the page argument, enabling remote cross-site scripting (XSS). The vulnerability is publicly disclosed and attack...
CVE-2024-57658
An issue in the sqltreehash1 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2025-22597 WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'CobrancaController.php' parameter 'local_recepcao'
WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the CobrancaController.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the localrecepcao parameter. The injected script...
CVE-2024-56299
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pektsekye Notify Odoo notify-odoo allows Stored XSS.This issue affects Notify Odoo: from n/a through = 1.0.0...
CVE-2023-46309
creationtimestamp| type| source ---|---|--- 2025-01-02 12:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2lamniy25 2025-01-02 13:38:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113759032903015004...
CVE-2024-12836 Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability
Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the...
CVE-2024-56564
creationtimestamp| type| source ---|---|--- 2024-12-27 15:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbsqnlmm2e...
CVE-2019-2483
...
CVE-2024-12220
creationtimestamp| type| source ---|---|--- 2024-12-17 07:29:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113666985358645445 2024-12-17 10:05:36+00:00| seen| https://t.me/cvedetector/13074...
CVE-2024-52065
creationtimestamp| type| source ---|---|--- 2024-12-13 10:40:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113645087963070553 2024-12-13 13:15:48+00:00| seen| https://t.me/cvedetector/12855...
CVE-2024-45470
creationtimestamp| type| source ---|---|--- 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...
CVE-2024-11891
The Perfect Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pfai' shortcode in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-49105
creationtimestamp| type| source ---|---|--- 2024-12-11 19:05:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113635749627048903 2025-01-15 12:01:53+00:00| seen| https://bsky.app/profile/andresbohren.bsky.social/post/3lfrpsqh6tc24...
CVE-2024-26923
creationtimestamp| type| source ---|---|--- 2024-12-10 20:32:03+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113630427385273491...
CVE-2024-55637
Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...
CVE-2024-52335
CVE-2024-52335 affects syngo.plaza VB30E (all versions before VB30E_HF05). The issue is failure to sanitize input data before sending to the SQL server, enabling arbitrary SQL commands that could compromise the entire database. Affected software: syngo.plaza VB30E; root cause: unsanitized SQL que...
CVE-2024-52491
creationtimestamp| type| source ---|---|--- 2024-12-02 15:36:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113583966212206274...