CVE-2024-4464

creationtimestamp| type| source ---|---|--- 2024-12-18 06:04:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113672314021913810 2024-12-18 07:50:17+00:00| seen| https://t.me/cvedetector/13164...

CVE-2024-56170

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI manifests are listings of relevant files that clients are supposed to verify. Assuming everything else is correct, the most recent version of a manifest should be prioritized over other versions, to prevent...

CVE-2024-11254

CVE-2024-11254 (AMP for WP – Accelerated Mobile Pages, WordPress) Vulnerability: Reflected cross-site scripting via the disqus_name parameter. Affected product: AMP for WP plugin for WordPress. Impact: Unauthenticated attackers can inject arbitrary scripts into pages executed in user browsers whe...

CVE-2024-53580

iperf v3.17.1 was discovered to contain a segmentation violation via the iperfexchangeparameters function...

CVE-2024-56169

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying Parties such as Fort are supposed to maintain a backup cache of the remote RPKI data. This can be employed as a fallback in case a new fetch fails or yields incorrect files. However, the product currently...

CVE-2024-51175

creationtimestamp| type| source ---|---|--- 2024-12-17 21:50:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113670373957707285 2024-12-18 00:18:42+00:00| seen| https://t.me/cvedetector/13140...

CVE-2024-29646

creationtimestamp| type| source ---|---|--- 2024-12-17 21:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113670348275480482 2024-12-18 00:18:41+00:00| seen| https://t.me/cvedetector/13138...

CVE-2024-56142

creationtimestamp| type| source ---|---|--- 2024-12-17 21:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113670348307536287 2024-12-18 00:18:40+00:00| seen| https://t.me/cvedetector/13137...

CVE-2024-12539

Elasticsearch vulnerability CVE-2024-12539: improper authorization controls could bypass Document Level Security, allowing access to documents beyond user roles. Connected sources indicate affected Elastic Stack versions (notably referenced security update 8-16-2 to 8-17-0) and a security bulleti...

CVE-2024-12539 Elasticsearch Incorrect Authorization

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow...

CVE-2024-55057

creationtimestamp| type| source ---|---|--- 2024-12-17 20:25:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113670039648933706 2024-12-17 23:28:25+00:00| seen| https://t.me/cvedetector/13131...

CVE-2024-12200

creationtimestamp| type| source ---|---|--- 2024-12-17 17:36:59+00:00| seen| https://t.me/cvedetector/13110 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1710/...

CVE-2024-49818 IBM Security Guardium Key Lifecycle Manager information disclosure

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2024-12179 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-36831

creationtimestamp| type| source ---|---|--- 2024-12-17 15:10:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113668798118318470 2024-12-17 16:46:36+00:00| seen| https://t.me/cvedetector/13098...

CVE-2024-10356

creationtimestamp| type| source ---|---|--- 2024-12-17 12:56:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113668272289530654 2024-12-17 15:06:15+00:00| seen| https://t.me/cvedetector/13092...

CVE-2024-47545

creationtimestamp| type| source ---|---|--- 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

CVE-2024-8429

creationtimestamp| type| source ---|---|--- 2024-12-17 11:41:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113667976409824348 2024-12-17 14:16:04+00:00| seen| https://t.me/cvedetector/13087...

CVE-2024-21978

A flaw was found in the AMD firmware. This vulnerability allows a malicious hypervisor to read or overwrite guest memory, potentially leading to data leakage or data corruption. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

CVE-2024-12220

creationtimestamp| type| source ---|---|--- 2024-12-17 07:29:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113666985358645445 2024-12-17 10:05:36+00:00| seen| https://t.me/cvedetector/13074...