576 matches found
CVE-2023-46309
creationtimestamp| type| source ---|---|--- 2025-01-02 12:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2lamniy25 2025-01-02 13:38:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113759032903015004...
CVE-2024-12836 Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability
Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the...
CVE-2024-56564
creationtimestamp| type| source ---|---|--- 2024-12-27 15:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbsqnlmm2e...
CVE-2019-2483
...
CVE-2024-12220
creationtimestamp| type| source ---|---|--- 2024-12-17 07:29:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113666985358645445 2024-12-17 10:05:36+00:00| seen| https://t.me/cvedetector/13074...
CVE-2024-52065
creationtimestamp| type| source ---|---|--- 2024-12-13 10:40:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113645087963070553 2024-12-13 13:15:48+00:00| seen| https://t.me/cvedetector/12855...
CVE-2024-45470
creationtimestamp| type| source ---|---|--- 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...
CVE-2024-11891
The Perfect Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pfai' shortcode in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-49105
creationtimestamp| type| source ---|---|--- 2024-12-11 19:05:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113635749627048903 2025-01-15 12:01:53+00:00| seen| https://bsky.app/profile/andresbohren.bsky.social/post/3lfrpsqh6tc24...
CVE-2024-26923
creationtimestamp| type| source ---|---|--- 2024-12-10 20:32:03+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113630427385273491...
CVE-2024-55637
Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...
CVE-2024-52335
CVE-2024-52335 affects syngo.plaza VB30E (all versions before VB30E_HF05). The issue is failure to sanitize input data before sending to the SQL server, enabling arbitrary SQL commands that could compromise the entire database. Affected software: syngo.plaza VB30E; root cause: unsanitized SQL que...
CVE-2024-52491
creationtimestamp| type| source ---|---|--- 2024-12-02 15:36:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113583966212206274...
CVE-2024-36463
The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects...
CVE-2024-44786
creationtimestamp| type| source ---|---|--- 2024-11-22 16:18:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113527510294237086...
CVE-2024-11529
creationtimestamp| type| source ---|---|--- 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1537/...
CVE-2024-51795
creationtimestamp| type| source ---|---|--- 2024-11-19 20:37:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113511540924710268...
CVE-2024-51637
creationtimestamp| type| source ---|---|--- 2024-11-19 19:07:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113511186624665760...
CVE-2024-10934
creationtimestamp| type| source ---|---|--- 2024-11-15 21:39:19+00:00| seen| https://t.me/cvedetector/11180 2024-11-15 21:54:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113489194020827153...