CVE-2024-44292

creationtimestamp| type| source ---|---|--- 2024-12-20 04:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpjmvsqqd2g 2024-12-20 04:25:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113683251724054879 2024-12-20 05:52:29+00:00| seen|...

CVE-2024-45818

creationtimestamp| type| source ---|---|--- 2024-12-19 12:08:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113679408646274887 2024-12-19 12:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldntz26p6s2s 2024-12-19 13:58:58+00:00| seen|...

CVE-2024-12686

creationtimestamp| type| source ---|---|--- 2024-12-18 20:30:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113675719318388901 2024-12-18 22:54:10+00:00| seen| https://t.me/cvedetector/13251 2024-12-19 17:22:24+00:00| seen|...

CVE-2024-52591

creationtimestamp| type| source ---|---|--- 2024-12-18 19:21:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113675448878441837 2024-12-18 22:03:56+00:00| seen| https://t.me/cvedetector/13246 2025-03-10 19:40:22+00:00| seen|...

CISCO-SA-20181003-IMCS

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:41+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793520465096 2024-12-17 06:41:50+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794409541585...

CVE-2024-49112

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 19:12:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113630112880421336 2024-12-10 20:52:38+00:00| seen|...

CVE-2024-51544

creationtimestamp| type| source ---|---|--- 2024-12-05 13:22:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113600428634440876 2024-12-05 15:21:29+00:00| seen| https://t.me/cvedetector/12092 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-...

Spring Eureka Detected

Spring Eureka is a service discovery and registration server. It enables microservices to dynamically discover and communicate with each other without hardcoded hostnames and ports. The scanner detected the usage of Spring Eureka on the target application. No source data...

ansible-10-10.6.0-1.1 on GA media (moderate)

ansible-10-10.6.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14536-1 Rating: moderate Cross-References: CVE-2014-4966 CVE-2014-4967 CVE-2015-3908 CVE-2016-3096 CVE-2016-9587 CVE-2017-7466 CVE-2017-7481 CVE-2017-7550 CVE-2018-10855 CVE-2018-10875 CVE-2018-16837 CVE-2018-16859 CVE-2018-16876...

CVE-2024-11482

creationtimestamp| type| source ---|---|--- 2024-11-29 07:39:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113565104536407982 2024-11-29 07:42:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113565117531942043 2024-11-29 13:16:04+00:00| seen|...

CVE-2024-11704

A double-free issue could have occurred in secpkcs7decoderstartdecrypt when handling an error path. Under specific conditions, the same symmetric key could have been freed twice, potentially leading to memory corruption. This vulnerability affects Firefox 133, Thunderbird 133, Firefox ESR 128.7,...

Halo Security Launches Slack Integration for Real-Time Alerts on New Assets and Vulnerabilities

MIAMI, Florida, 21st November 2024, CyberNewsWire...

CVE-2024-44309

creationtimestamp| type| source ---|---|--- 2024-11-19 18:58:42+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113511151778117019 2024-11-20 02:02:32+00:00| exploited| https://t.me/cvedetector/11554 2024-11-20 04:00:00+00:00| seen|...

CVE-2024-10204

creationtimestamp| type| source ---|---|--- 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1529/ 2024-11-19 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1528/ 2024-11-19 13:20:35+00:00| seen|...

LibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints

Summary The application fail to sanitising inputs properly and rendering the code from user input to browser which allow an attacker to execute malicious javascript code. Details User with Admin role can edit the Display Name of a device, the application did not properly sanitize the user input i...

CVE-2024-5594

creationtimestamp| type| source ---|---|--- 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06 2025-01-06 13:54:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113781746778966575 2025-01-06 14:15:27+00:00| seen|...

XenServer and Citrix Hypervisor Security Update for CVE-2024-45818

Description of Problem An issue has been identified that affects both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR and allows a malicious administrator of a guest VM to cause the host to crash or become unresponsive. This issue has the following identifier: CVE-2024-45818 What Customers Should ...

CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-5910 CVS...

CVE-2019-7254

creationtimestamp| type| source ---|---|--- 2024-11-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-08 2025-02-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-02 2025-04-07 00:00:00+00:00| seen| The Shadowserver...

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server, which...