9518 matches found
CVE-2024-55663
creationtimestamp| type| source ---|---|--- 2024-12-12 18:57:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113641379176104368 2024-12-12 21:21:58+00:00| seen| https://t.me/cvedetector/12807...
CVE-2024-55099
creationtimestamp| type| source ---|---|--- 2024-12-12 15:19:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113640524757203803 2024-12-12 18:01:12+00:00| seen| https://t.me/cvedetector/12797...
CVE-2024-28145
creationtimestamp| type| source ---|---|--- 2024-12-12 13:43:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113640145030708581 2024-12-12 16:20:49+00:00| seen| https://t.me/cvedetector/12791...
CVE-2024-28144
creationtimestamp| type| source ---|---|--- 2024-12-12 13:32:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113640101712655643 2024-12-12 16:20:48+00:00| seen| https://t.me/cvedetector/12790...
CVE-2024-54113
Technical details (affected products, components, root cause, vulnerable versions, remediation) are not provided in the supplied documents beyond the general description and CVSS context. Monitor for updates from official advisories.
CVE-2024-54108
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability...
CVE-2024-54101
creationtimestamp| type| source ---|---|--- 2024-12-12 11:44:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113639676531469272...
CVE-2024-44131
creationtimestamp| type| source ---|---|--- 2024-12-12 11:35:00+00:00| seen| https://thehackernews.com/2024/12/researchers-uncover-symlink-exploit.html 2024-12-12 13:40:46+00:00| seen| https://t.me/thehackernews/6033 2024-12-12 14:54:31+00:00| seen|...
CVE-2024-45470
creationtimestamp| type| source ---|---|--- 2024-12-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09...
CVE-2024-21574
The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install custom nodes which is added to the server by the extension. This allows an attacker to craft a request that triggers a pip install on a user controlled package or...
CVE-2024-12329
creationtimestamp| type| source ---|---|--- 2024-12-12 07:06:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113638584226065749 2024-12-12 08:48:49+00:00| seen| https://t.me/cvedetector/12745...
CVE-2024-11724 Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Whitelist Script
The Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker for GDPR, CCPA & ePrivacy plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wplscriptsave AJAX action in all versions up to, and including, 3.6.5...
CVE-2024-12040
creationtimestamp| type| source ---|---|--- 2024-12-12 05:57:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113638312581536551 2024-12-12 07:58:37+00:00| seen| https://t.me/cvedetector/12736...
CVE-2024-11359
creationtimestamp| type| source ---|---|--- 2024-12-12 05:27:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113638194437783016 2024-12-12 07:58:39+00:00| seen| https://t.me/cvedetector/12739...
CVE-2024-12255 Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure
The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via the cf7sa-info.php file that returns phpinfo data. This makes it possible for unauthenticated attackers to extract configuration information tha...
CVE-2024-11891
The Perfect Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pfai' shortcode in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-11015
creationtimestamp| type| source ---|---|--- 2024-12-12 03:33:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113637748490132426 2024-12-12 06:17:44+00:00| seen| https://t.me/cvedetector/12705...
CVE-2024-44290
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, watchOS 11.1. An app may be able to determine a user’s current location...
CVE-2024-44201
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iPadOS 17.7.3, macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. Processing a malicious crafted file may lead to a denial-of-service...