CVE-2017-13318

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-24747

creationtimestamp| type| source ---|---|--- 2025-01-27 15:17:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqadn5b372p 2025-01-27 17:40:28+00:00| seen| https://t.me/cvedetector/16472...

PT-2025-2283 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions prior to 9.2.9.0 Description: The issue is related to a component of the JD Edwards EnterpriseOne Tools system, specifically the Business Logic Infra SEC, which has a flaw in its data source confirmatio...

GHSA-VG7J-7CWX-8WGW

creationtimestamp| type| source ---|---|--- 2025-01-19 00:37:53+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lg2lhedcgo2e...

CVE-2017-13322

creationtimestamp| type| source ---|---|--- 2025-01-17 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxwfcys262t 2025-01-17 23:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfxxxs2u532e 2025-01-17 23:57:23+00:00| seen|...

CVE-2024-12593

creationtimestamp| type| source ---|---|--- 2025-01-15 12:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrqmy73zh2c 2025-01-15 12:21:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1735 2025-01-15 12:47:45+00:00| seen|...

CVE-2024-12919

creationtimestamp| type| source ---|---|--- 2025-01-14 10:47:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfp37oam242e 2025-01-14 10:48:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfp37oor2n2w 2025-01-14 10:48:18+00:00| seen|...

CVE-2024-56414

creationtimestamp| type| source ---|---|--- 2025-01-02 16:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwsk7y622 2025-01-02 16:52:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxlt3as2r 2025-01-02 17:36:30+00:00| seen|...

CVE-2024-54386

creationtimestamp| type| source ---|---|--- 2024-12-16 14:51:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113663060625539231...

CVE-2024-51460

creationtimestamp| type| source ---|---|--- 2024-12-11 12:18:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113634149856471421 2024-12-11 15:14:17+00:00| seen| https://t.me/cvedetector/12632...

CVE-2024-11671

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching...

CVE-2024-11671

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching...

CVE-2024-11671

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching...

CVE-2024-11671

CVE-2024-11671 concerns Devolutions Remote Desktop Manager on Windows. Multiple sources confirm an improper authentication flaw in the SQL data source MFA validation, enabling an authenticated user to bypass MFA by switching data sources. Affected product/version: Devolutions Remote Desktop Manag...

CVE-2024-11671

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching...

Devolutions Remote Desktop Manager 安全漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada Inc. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2024.3.17 and prior versions, which stems from incorrect authentication in SQL data...

PT-2024-17179 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2024.3.17 and earlier Description: The issue is related to improper authentication in SQL data source MFA validation, allowing an authenticated user to bypass the MFA validation via data source...

CVE-2024-52342

creationtimestamp| type| source ---|---|--- 2024-11-19 00:04:58+00:00| seen| https://t.me/cvedetector/11402 2025-09-25 00:36:28+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...

The vulnerability of the libpq component in the PostgreSQL database management system allows attackers to circumvent existing security restrictions and execute a type of “man-in-the-middle” attack.

The vulnerability of the libpq component in the PostgreSQL database management system is related to the use of an unreliable data source. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and carry out a “man-in-the-middle” type attack...

The vulnerability of the CORS mechanism in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the CORS mechanism in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a data source confirmation error during the processing of the resource://pdf.js path. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gai...