9519 matches found
CVE-2024-11665
creationtimestamp| type| source ---|---|--- 2024-11-24 22:41:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113540339158649954...
CVE-2024-10519
creationtimestamp| type| source ---|---|--- 2024-11-23 09:43:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113531616641857803...
CVE-2023-52332
creationtimestamp| type| source ---|---|--- 2024-11-22 20:57:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113528607465318059...
CVE-2024-44786
creationtimestamp| type| source ---|---|--- 2024-11-22 16:18:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113527510294237086...
CVE-2024-48862
creationtimestamp| type| source ---|---|--- 2024-11-22 15:33:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113527330538981650 2024-11-22 15:36:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113527344569799324 2024-11-26 17:52:20+00:00| seen| https://t.me/itsecnews/4826...
WordPress Social Login Plugin <= 5.9.0 is vulnerable to Privilege Escalation
Software Social Login Type Plugin Vulnerable versions = 5.9.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-10961 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 284fa6881d99 Credits wesley wcraf...
CVE-2024-52055
creationtimestamp| type| source ---|---|--- 2024-11-21 22:57:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113523414336016217 2026-07-20 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr3jflmlo62s...
CVE-2024-53090
creationtimestamp| type| source ---|---|--- 2024-11-21 18:26:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113522350680089284 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-01-09 13:55:34+00:00| seen|...
CVE-2024-53333
creationtimestamp| type| source ---|---|--- 2024-11-21 17:38:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113522162331968476...
CVE-2024-52307 authentik allows a timing attack due to missing constant time comparison for metrics view
authentik is an open-source identity provider. Due to the usage of a non-constant time comparison for the /-/metrics/ endpoint it was possible to brute-force the SECRETKEY, which is used to authenticate the endpoint. The /-/metrics/ endpoint returns Prometheus metrics and is not intended to be...
CVE-2024-53429
Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...
CVE-2024-48747
creationtimestamp| type| source ---|---|--- 2024-11-21 15:02:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113521548916226675...
CVE-2024-52803
creationtimestamp| type| source ---|---|--- 2024-11-21 14:48:04+00:00| published-proof-of-concept| https://github.com/hiyouga/LlamaFactory/security/advisories/GHSA-hj3w-wrh4-44vp 2024-11-21 16:57:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113522000459979063...
CVE-2024-21855
creationtimestamp| type| source ---|---|--- 2024-11-21 14:44:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113521477793438004 2024-11-21 14:47:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113521489802651847 2026-06-21 09:07:08+00:00| seen|...
CVE-2024-11371
creationtimestamp| type| source ---|---|--- 2024-11-21 08:36:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113520028765864610...
CVE-2024-9828
creationtimestamp| type| source ---|---|--- 2024-11-21 06:21:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113519499588829518...
CVE-2024-11511
creationtimestamp| type| source ---|---|--- 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1556/...
CVE-2024-11529
creationtimestamp| type| source ---|---|--- 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1537/...