CVE-2024-49336

creationtimestamp| type| source ---|---|--- 2024-12-19 17:29:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113680669150084414 2024-12-19 18:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4shh362x 2024-12-19 19:50:12+00:00| seen|...

CVE-2024-51471

creationtimestamp| type| source ---|---|--- 2024-12-19 17:19:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113680632170125877 2024-12-19 18:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4vbxhw2t 2024-12-19 19:50:11+00:00| seen|...

CVE-2024-52896

creationtimestamp| type| source ---|---|--- 2024-12-19 17:10:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113680595334486240 2024-12-19 17:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoer5neq422 2024-12-19 18:59:59+00:00| seen|...

CVE-2024-12790

creationtimestamp| type| source ---|---|--- 2024-12-19 17:02:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113680563005258460 2024-12-19 17:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoeqygnvm2z 2024-12-19 19:00:02+00:00| seen|...

CVE-2024-9102

phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Value CSV file, but it does not neutralize special elements that could be interpreted as a command when the file is opened by a spreadsheet...

CVE-2024-9102

creationtimestamp| type| source ---|---|--- 2024-12-19 13:47:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113679798779790200 2024-12-19 14:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo2p47vkt2a 2024-12-19 15:39:20+00:00| seen|...

CVE-2024-45818

The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the virtual VGA is in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the return from the function that acquired it. This behavior results in a problem when emulatin...

CVE-2024-45818 Deadlock in x86 HVM standard VGA handling

The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the virtual VGA is in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the return from the function that acquired it. This behavior results in a problem when emulatin...

CVE-2024-45818

The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the virtual VGA is in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the return from the function that acquired it. This behavior results in a problem when emulatin...

CVE-2024-12560

creationtimestamp| type| source ---|---|--- 2024-12-19 07:11:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113678240214070048 2024-12-19 08:57:54+00:00| seen| https://t.me/cvedetector/13308...

CVE-2023-23357

CVE-2023-23357 affects QNAP’s QuLog Center (various versions) with a cross-site scripting (XSS) flaw. The vulnerability arises in QuLog Center prior to fixed versions and could let an attacker with administrator access bypass security controls or read application data. Affected/fixed details per ...

CVE-2024-54982

The CVE-2024-54982 issue affects Quectel BC25 firmware version BC25PAR01A06, where authentication can be bypassed via a crafted NAS message. Root cause details in the connected PT-2024-36457 disclosure describe a NAS-based authentication bypass affecting BC25PAR01A06; no other product versions ar...

CVE-2022-44514

creationtimestamp| type| source ---|---|--- 2024-12-18 23:24:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113676404772632378 2024-12-19 02:15:20+00:00| seen| https://t.me/cvedetector/13289...

CVE-2024-39804

A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then ma...

CVE-2024-47039

In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47038

CVE-2024-47038 describes an out-of-bounds write in the function dhd_prot_flowrings_pool_release within dhd_msgbuf.c, caused by a missing bounds check. This can lead to local privilege escalation with no user interaction required. Documents collectively indicate a Linux/Android kernel context (Pix...

CVE-2024-56050 WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in VibeThemes WPLMS wplmsplugin allows Upload a Web Shell to a Web Server.This issue affects WPLMS: from n/a through 1.9.9.5.3...

CVE-2024-51646

creationtimestamp| type| source ---|---|--- 2024-12-18 11:44:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113673652217086692 2024-12-18 11:48:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113673666336880749 2024-12-18 13:41:43+00:00| seen| https://t.me/cvedetector/131...

gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...

gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet

A flaw was found in the Vorbis decoder in the GStreamer library. Processing a specially crafted input file can cause a stack-based buffer overflow in the Vorbis decoder due to improper input validation, resulting in unexpected behavior or, most likely, an application crash...