CVE-2024-45401

creationtimestamp| type| source ---|---|--- 2024-09-05 21:23:17+00:00| seen| https://t.me/cvedetector/4936...

5 Reasons Why You Need API Discovery

...

WordPress Amelia plugin <= 1.2.4 - Missing Authorization to Sensitive Information Exposure vulnerability

Missing Authorization to Sensitive Information Exposure vulnerability discovered by Nadim Zubidat in WordPress Plugin Amelia versions = 1.2.4...

D-Link DNS-320 信息泄露漏洞

The D-Link DNS-320 is a two-drive networked storage device NAS from AUO, designed for home and small office scenarios, supporting up to 4TB of storage capacity. The D-Link DNS-320 suffers from an information disclosure vulnerability, which originates from the file /cgi-bin/discovery.cgi being...

CVE-2023-51712

An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function...

CVE-2024-45442

creationtimestamp| type| source ---|---|--- 2024-09-04 05:11:41+00:00| seen| https://t.me/cvedetector/4737...

WordPress The Ultimate WordPress Toolkit – WP Extended plugin <= 3.0.8 - Insecure Direct Object Reference vulnerability

Insecure Direct Object Reference vulnerability discovered by Marco Wotschka in WordPress Plugin The Ultimate WordPress Toolkit – WP Extended versions = 3.0.8...

runc can be confused to create empty files/directories on the host

Impact runc 1.1.13 and earlier as well as 1.2.0-rc2 and earlier can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting a race with os.MkdirAll. While this can be used to create empty files,...

GHSA-JFVP-7X6P-H2PV vulnerabilities

Vulnerabilities for packages: k3s, docker, grype, buildah, podman, kubernetes, grafana-alloy, k8s-device-plugin, ctop, runc, cadvisor, neuvector-scanner, syft, opentelemetry-collector-contrib...

CVE-2024-45310 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, kubernetes-fips, gosu, node-feature-discovery, cadvisor, ctop, neuvector-scanner-fips, neuvector-fips, buildah, k3s, eks-distro, cluster-autoscaler-fips, grype, cadvisor-fips, cluster-autoscaler, runc, syft, grafana-alloy-fips,...

CVE-2024-45310 vulnerabilities

Vulnerabilities for packages: k3s, docker, grype, buildah, podman, kubernetes, grafana-alloy, k8s-device-plugin, ctop, runc, cadvisor, neuvector-scanner, syft, opentelemetry-collector-contrib...

Secure Your Business with Qualys’ New Cloud Agent Deployment using Qualys Scanner

The significance of cybersecurity in today’s world cannot be understated. Businesses are constantly exposed to evolving threats that challenge their infrastructure. Organizations deploy various security solutions to combat these risks, including agents installed on their servers, endpoints, and...

CVE-2024-7654

An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-discovery feature was activated. Unauthorized access to the discovery service's UDP port allowed content injection into parts of the OEM web interface making it possible for other...

CVE-2024-7654 Unauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery service

An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-discovery feature was activated. Unauthorized access to the discovery service's UDP port allowed content injection into parts of the OEM web interface making it possible for other...

CVE-2024-7654

The CVE affects Progress OpenEdge Management with OEE/OEM auto-discovery, where the ActiveMQ Discovery service was reachable by default. Unauthorized access to the discovery service’s UDP port allowed content injection into parts of the OEM web interface, enabling potential user deception. Public...

CVE-2024-7654 Unauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery service

An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-discovery feature was activated. Unauthorized access to the discovery service's UDP port allowed content injection into parts of the OEM web interface making it possible for other...

PT-2024-38482 · Progress +1 · Openedge Management +1

Name of the Vulnerable Software and Affected Versions: OpenEdge Management versions prior to 12.8.1 Description: The issue concerns an ActiveMQ Discovery service that was reachable by default from an OpenEdge Management installation when the OEE/OEM auto-discovery feature was activated...

Progress Software OpenEdge 安全漏洞

Progress Software OpenEdge is a suite of integrated development environments IDEs from Progress Software, USA. A security vulnerability exists in Progress Software OpenEdge that stems from a default that allows access to the ActiveMQ Discovery service from the OpenEdge Management installation...

UBUNTU-CVE-2024-45305

gix-path is a crate of the gitoxide project dealing with git paths and their conversions. gix-path executes git to find the path of a configuration file that belongs to the git installation itself, but mistakenly treats the local repository's configuration as system-wide if no higher scoped...

CVE-2024-33060

creationtimestamp| type| source ---|---|--- 2024-09-02 15:33:12+00:00| seen| https://t.me/cvedetector/4628 2024-12-16 05:11:23+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html 2024-12-16 16:32:27+00:00| seen|...