Important: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

CVE-2024-54794

Engineering Ingegneria Informatica SpagoBI version 3.5.1 and earlier are vulnerable to a Command Injection vulnerability within the script input feature. The root cause is the failure to properly neutralize special elements in the command input field, allowing an attacker to inject and execute ar...

Important: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2024-57770

CVE-2024-57770 affects JFinalOA prior to v2025.01.01, with a SQL injection vulnerability in the component apply/save#oaContractApply.id. The issue’s root cause is an input handling flaw that enables injectable SQL strings via that parameter, leading to potential confidentiality, integrity, and av...

CVE-2025-20088

creationtimestamp| type| source ---|---|--- 2025-01-15 17:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbfiuret2f 2025-01-15 19:18:41+00:00| seen| https://t.me/cvedetector/15488...

Debian: Security Advisory (DLA-4013-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-48876

In the Linux kernel, the following vulnerability has been resolved: stackdepot: fix stackdepotsaveflags in NMI context Per documentation, stackdepotsaveflags was meant to be usable from NMI context if STACKDEPOTFLAGCANALLOC is unset. However, it still would try to take the poollock in an attempt ...

CVE-2025-22596 WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c'

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the modulosvisiveis.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msgc parameter. This vulnerability is fixed in...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.14.44 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Moderate: Red Hat Security Advisory: tuned security update

An update for tuned is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2024-11907

creationtimestamp| type| source ---|---|--- 2025-01-09 11:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgg5jsv27 2025-01-09 11:29:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113798164145069141 2025-01-09 12:16:11+00:00| seen|...

Important: Red Hat Security Advisory: iperf3 security update

An update for iperf3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2024-11350 AdForest <= 5.1.6 - Privilege Escalation via Password Reset/Account Takeover

The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. This is due to the plugin not properly validating a user's identity prior to updating their password through the adforestresetpassword function. This makes it...

CVE-2024-12440

creationtimestamp| type| source ---|---|--- 2025-01-07 05:37:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/332 2025-01-07 06:03:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113785558250577517 2025-01-07 06:16:14+00:00| seen|...

CVE-2024-11377

The Automate Hub Free by Sperse.IO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2024-33059 Use After Free in Computer Vision

Memory corruption while processing frame command IOCTL calls...

CVE-2024-56678

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copyfromkernelnofault can be called when doing read of /proc/kcore. /proc/kcore can have some unmapped kfence objects which when read via copyfromkernelnofault can cause page...

CVE-2024-56507

CVE-2024-56507 : A reflected Cross-Site Scripting (XSS) vulnerability exists in LinkAce prior to version 1.15.6, specifically in the Edit Link module’s URL field where input is reflected in the HTML response. The issue allows injection and execution of arbitrary JavaScript in a victim’s browser, ...

CVE-2024-56673

creationtimestamp| type| source ---|---|--- 2024-12-27 15:21:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecc33vgwu2c 2024-12-27 16:50:52+00:00| seen| https://t.me/cvedetector/13764 2025-01-06 15:37:42+00:00| published-proof-of-concept|...

CVE-2024-56672

creationtimestamp| type| source ---|---|--- 2024-12-27 15:21:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecc2z3o352f 2024-12-27 16:50:49+00:00| seen| https://t.me/cvedetector/13761 2025-04-12 00:10:16+00:00| seen|...