CVE-2023-35051

creationtimestamp| type| source ---|---|--- 2024-12-13 17:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113646755295744378...

CVE-2024-54345

creationtimestamp| type| source ---|---|--- 2024-12-13 17:26:44+00:00| seen| https://t.me/cvedetector/12876 2024-12-14 04:00:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113649176274740657...

SUSE CVE-2024-47538

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

PT-2024-12337 · Google · Recaptcha

Name of the Vulnerable Software and Affected Versions: reCAPTCHA for all versions n/a through 1.22 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a through...

PT-2024-36179 · Unknown · Bill Minozzi Car Dealer

Name of the Vulnerable Software and Affected Versions: Bill Minozzi Car Dealer versions n/a through 4.46 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...

PT-2024-36218 · Unknown · Zeshan B Quran Phrases About Most People Shortcodes

Name of the Vulnerable Software and Affected Versions: Zeshan B Quran Phrases About Most People Shortcodes versions 1.4 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which is a DOM-Based XSS...

PT-2024-36112 · Unknown · Limit Login Attempts

Name of the Vulnerable Software and Affected Versions: Limit Login Attempts versions n/a through 5.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

netfilter: Fix use-after-free in get_info()

...

USN-7108-2 python-asyncssh vulnerabilities

USN-7108-1 fixed vulnerabilities in AysncSSH. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that AsyncSSH did not properly handle the extension info message. An attacker able to intercept...

CVE-2024-11427

creationtimestamp| type| source ---|---|--- 2024-12-12 03:48:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113637807553404847 2024-12-12 06:17:37+00:00| seen| https://t.me/cvedetector/12700...

ALPINE-CVE-2024-47600

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the formatchannelmask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the...

AZL-62399 CVE-2024-47538 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

WordPress Hack-Info plugin <= 3.17 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Hack-Info versions = 3.17...

PT-2024-9430 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can allow an attacker to affect the system. Recommendations: At the moment,...

CVE-2024-46547

A vulnerability was found in Romain Bourdon Wampserver all versions discovered in v3.2.3 and v3.2.6 where unauthorized users could access sensitive information due to improper access control validation via PHP Info Page. This issue can lead to data leaks...

CVE-2024-54217

Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through = 6.4.1...

CVE-2024-54217

CVE-2024-54217 describes a Missing Authorization vulnerability in the WordPress plugin ARForms by Repute Info Systems, affecting ARForms versions from n/a up to and including 6.4.1. The connected sources confirm the issue is related to unauthorized changes to the plugin settings (“Plugin Settings...

CVE-2024-46547

A security vulnerability exists in Romain Bourdon Wampserver (all versions, discovered in v3.2.3 and v3.2.6 ) due to improper access control validation via the PHP Info Page . This flaw allows unauthorized users to access sensitive information, potentially leading to data leaks . No specific reme...

PT-2024-12159 · Sparkle Themes · Chankhe

Name of the Vulnerable Software and Affected Versions: Chankhe versions 1.0.5 and earlier Description: The issue is related to a Missing Authorization vulnerability in Sparkle Themes Chankhe, which allows exploiting incorrectly configured access control security levels. Recommendations: For Chank...

PT-2024-12010 · Unknown · Igor Benic Simple Giveaways

Name of the Vulnerable Software and Affected Versions: Igor Benic Simple Giveaways versions 2.48.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...