17766 matches found
CVE-2023-52187
CVE-2023-52187 affects the WordPress plugin Image Source Control Lite – Show Image Credits and Captions . Public records indicate vulnerability is an Exposure of Sensitive Information to an Unauthorized Actor affecting versions from unknown through 2.17.0 . The data sources also indicate this vul...
CVE-2024-0937
Summary of CVE-2024-0937 : A critical deserialization vulnerability in van_der_Schaar LAB synthcity 0.2.9 affects the PKL File Handler’s load_from_file function. The issue enables remote deserialization attacks and is supported by multiple sources (Red Hat, Veracode, OSV/GHSA, CVE listing). Descr...
CVE-2024-0923
CVE-2024-0923 affects Tenda AC10U, specifically the formSetDeviceName function in version 15.03.06.49_multi_TDE01. The vulnerability is a stack-based buffer overflow caused by manipulating the devName argument, enabling remote exploitation with high impact to confidentiality, integrity, and avail...
Authentication flaw
A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to access sensitive system...
CVE-2024-0882
creationtimestamp| type| source ---|---|--- 2024-01-25 20:26:10+00:00| seen| https://t.me/ctinow/173775 2024-01-31 21:17:17+00:00| seen| https://t.me/ctinow/177093 2024-02-18 14:11:56+00:00| seen| https://t.me/ctinow/187251...
RHSA-2024:0419
creationtimestamp| type| source ---|---|--- 2024-01-24 17:17:02+00:00| seen| https://t.me/ctinow/172932...
CVE-2023-6697
creationtimestamp| type| source ---|---|--- 2024-01-24 15:26:49+00:00| seen| https://t.me/ctinow/172834 2024-02-17 19:16:24+00:00| seen| https://t.me/ctinow/187023 2024-12-14 05:38:37+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-6697.yam...
CVE-2024-22141
CVE-2024-22141 affects Profile Builder Pro for WordPress (
CVE-2024-22301
CVE-2024-22301 affects the WordPress plugin Albo Pretorio On line (versions n/a–4.6.6). Root cause: Exposure of sensitive information to an unauthorized actor. Impact: confidential data disclosure; no publicly documented patch version in provided sources. Advisories from Patchstack/Red Hat/ENISA ...
CVE-2024-0584
creationtimestamp| type| source ---|---|--- 2024-01-23 23:16:24+00:00| seen| https://t.me/ctinow/172382 2024-02-06 08:41:15+00:00| seen| https://t.me/ctinow/179833 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...
Apple WebKit Code Execution Vulnerability
Apple WebKit is an open source browser engine developed by Apple. The Apple WebKit code execution vulnerability can be exploited by an attacker to construct a malicious page to lure a victim into visiting it, which will be successfully exploited to execute code on the target system...
formazioneprofessionaleosa.it Improper Access Control vulnerability OBB-3840569
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-23768
CVE-2024-23768 (Dremio) : Dremio before 24.3.1 suffers a path traversal flaw where an authenticated user with no privileges on certain folders plus access to the source and at least one folder can access restricted folders, files, and datasets. Affected versions are 24.0.0–24.3.0, 23.0.0–23.2.3, ...
CVE-2024-22920
swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c...
CVE-2022-47160
The CVE-2022-47160 entry describes an exposure of sensitive information to an unauthorized actor affecting the WordPress plugin Wp Social Login and Register Social Counter (WP Social). Affected component: the WP Social plugin; vulnerable version range: up to 1.9.0 (from n/a through 1.9.0). Root c...
CVE-2024-22920
swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c...
CVE-2024-0580
CVE-2024-0580 affects QSige, part of the IDMSistemas platform. The root cause is omission of user-controlled key authorization in the API, enabling access to sensitive information via the endpoint /qsige.locator/quotePrevious/centers/X, where X can be 1, 2, 3, etc. Documents identify the affected...
CVE-2024-22548
Summary: CVE-2024-22548 affects FlyCms 1.0, with a Cross Site Scripting (XSS) vulnerability in the system website settings, specifically the website name field. What’s in scope (from provided docs): The vulnerability is described as XSS in FlyCms 1.0. CVSS v3.1 metrics indicate a base score of 5....