CVE-2024-54360

creationtimestamp| type| source ---|---|--- 2024-12-16 14:36:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113663001547940657...

CVE-2023-32963

creationtimestamp| type| source ---|---|--- 2024-12-13 16:44:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113646519090011733...

CVE-2024-9608

creationtimestamp| type| source ---|---|--- 2024-12-13 11:30:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113645285946479868 2024-12-13 14:06:04+00:00| seen| https://t.me/cvedetector/12865...

OESA-2024-2549 linux-firmware security update

This package contains firmware images required by some devices. Security Fixes: IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in...

CVE-2024-55879

creationtimestamp| type| source ---|---|--- 2024-12-12 19:22:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113641477906690234 2024-12-12 22:12:13+00:00| seen| https://t.me/cvedetector/12812...

CVE-2024-54108

CVE-2024-54108 is described across sources as a read/write vulnerability in the Huawei HarmonyOS image decoding module that can affect availability upon successful exploitation. The available documents identify the affected software family (HarmonyOS) and the vulnerable component (image decoding ...

ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()

...

CVE-2024-54526

creationtimestamp| type| source ---|---|--- 2024-12-12 00:44:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113637081261182953 2024-12-12 03:47:13+00:00| seen| https://t.me/cvedetector/12686 2024-12-12 09:59:39+00:00| seen| https://t.me/RussianOSINT/4978...

CVE-2024-44242

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware...

Patch Tuesday - December 2024

Microsoft is addressing 70 vulnerabilities this December 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and public disclosure for one of the vulnerabilities published today, and this is reflected in a CISA KEV entry. For the third month in a row, Microsoft has published...

CVE-2024-49097

CVE-2024-49097 is a Windows Elevation of Privilege affecting the Windows PrintWorkflowUserSvc component. The NC Scadvisory entry assigns CVSS 3.1/7.0 (Local, High attack complexity, Low privileges required, No user interaction; Execution against Confidentiality/Integrity/Availability at High). Co...

CVE-2024-49089

creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 19:37:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113630212990764479...

GHSA-H97M-WW89-6JMQ `idna` accepts Punycode labels that do not produce any non-ASCII when decoded

idna 0.5.0 and earlier accepts Punycode labels that do not produce any non-ASCII output, which means that either ASCII labels or the empty root label can be masked such that they appear unequal without IDNA processing or when processed with a different implementation and equal when processed with...

CVE-2022-38947

SQL Injection vulnerability in Flipkart-Clone-PHP version 1.0 in entry.php in producttitle parameter, allows attackers to execute arbitrary code...

CVE-2023-49756

creationtimestamp| type| source ---|---|--- 2024-12-09 13:01:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113622993023707927...

Flipkart-Clone-PHP 安全漏洞

Flipkart-Clone-PHP is an application by Jigar Sable Personal Developer. A security vulnerability exists in Flipkart-Clone-PHP version 1.0, which stems from the producttitle parameter in the entry.php page containing a SQL injection vulnerability...

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

...

CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

BELL-CVE-2024-53127

Bulletin has no description...

GHSA-JP26-88MW-89QR sigstore-java has a vulnerability with bundle verification

Summary sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a checkpoint. Impact This bug impacts clients using any variation of KeylessVerifier.verify Currently checkpoints are only used to ensure the root hash of an inclusion proof was...