4517 matches found
UBUNTU-CVE-2024-56372
In the Linux kernel, the following vulnerability has been resolved: net: tun: fix tunnapiallocfrags syzbot reported the following crash 1 Issue came with the blamed commit. Instead of going through all the iov components, we keep using the first one and end up with a malformed skb. 1 kernel BUG a...
Exploit for Cross-site Scripting in Microweber
CVE-2024-33299 Stored Cross Site Scripting vulnerability in Mi...
CVE-2024-33299
Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users...
MonicaHQ security vulnerabilities
MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version v4.1.2 that stems from the firstname and lastname parameters in the Add New Relationship feature containing multiple client-side injections...
CVE-2024-33299: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users...
PT-2025-3085
Name of the Vulnerable Software and Affected Versions MonicaHQ version 4.1.2 Description The issue is related to multiple Client-Side Injection vulnerabilities found in MonicaHQ. These vulnerabilities occur via the first name and last name parameters in the Add a new relationship feature...
CVE-2024-33299
Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users...
Job Recruitment System fln_update() Code Execution
The vulnerability of the flnupdate function in the alledits.php /parse/alledits.php personnel recruitment system is related to the failure to take measures to neutralize special elements when processing the parameters fname and lname. Exploiting this vulnerability can allow an intruder to gain...
CVE-2024-23415
creationtimestamp| type| source ---|---|--- 2025-01-01 00:18:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbxjo4k32i...
CVE-2024-23412
creationtimestamp| type| source ---|---|--- 2025-01-01 00:18:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lenbxcugva25...
PT-2025-36288
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the tracing code called by the SCLP interrupt handler. Early exits occur if the SCCB address associated with an interrupt is NULL, after physical to...
October 6, 2020, update for Visio 2016 (KB4484333)
October 6, 2020, update for Visio 2016 KB4484333 Applies To Visio Standard 2016 Visio Professional 2016 This article describes update 4484333 for Microsoft Visio 2016 that was released on October 6, 2020. Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer...
GHSA-RJ9M-QF65-F5GG
creationtimestamp| type| source ---|---|--- 2024-12-31 15:17:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113748100084170494...
CVE-2024-56235
creationtimestamp| type| source ---|---|--- 2024-12-31 10:41:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113747013095469324 2024-12-31 12:52:11+00:00| seen| https://t.me/cvedetector/13988...
CVE-2024-56213
creationtimestamp| type| source ---|---|--- 2024-12-31 10:05:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113746873154772102 2024-12-31 12:02:03+00:00| seen| https://t.me/cvedetector/13983...
SUSE CVE-2024-56687
In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usbepqueue call trace below, supplemented with missing calls: req-complete from...
UBUNTU-CVE-2024-56687
In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usbepqueue call trace below, supplemented with missing calls: req-complete from...
CVE-2024-56687 usb: musb: Fix hardware lockup on first Rx endpoint request
In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usbepqueue call trace below, supplemented with missing calls: req-complete from...
CVE-2024-56687 usb: musb: Fix hardware lockup on first Rx endpoint request
In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usbepqueue call trace below, supplemented with missing calls: req-complete from...
CVE-2024-56687 usb: musb: Fix hardware lockup on first Rx endpoint request
In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usbepqueue call trace below, supplemented with missing calls: req-complete from...