CVE-2023-40000

LiteSpeed Cache (WordPress plugin)

CVE-2024-3865

CVE-2024-3865 : Mozilla Firefox memory-safety vulnerabilities affecting Firefox versions older than 125. The connected documents confirm memory-safety bugs (in Firefox 124) with evidence of memory corruption and potential to run arbitrary code. Affected product/component: Mozilla Firefox; root ca...

CVE-2024-3302

CVE-2024-3302 describes an unbounded processing of HTTP/2 CONTINUATION frames, enabling an Out of Memory condition in the browser. Affected: Firefox <125, Firefox ESR <115.10, Thunderbird

CVE-2024-3861

CVE-2024-3861 is a Firefox/Thunderbird memory-safety issue caused by an AlignedBuffer self-move that can lead to a use-after-free due to an incorrect reference count. The connected Astra Linux bulletin confirms vulnerable products and versions: Firefox <125, Firefox ESR <115.10, and Thunder...

CVE-2024-3859

CVE-2024-3859: Mozilla Firefox and Thunderbird are affected by a 32-bit integer overflow that can cause an out-of-bounds read via a malformed OpenType font. Affected products per the CVE entry: Firefox < 125, Firefox ESR < 115.10, and Thunderbird

CVE-2024-3857

CVE-2024-3857 is a concrete Firefox/Thunderbird memory-safety issue caused by the JIT generating incorrect code for arguments, enabling use-after-free during GC. Affected: Firefox <125, Firefox ESR <115.10, Thunderbird

CVE-2024-3855

CVE-2024-3855 is a Firefox vulnerability where the JIT optimizer incorrectly handled MSubstr, causing out-of-bounds reads in affected builds. The issue affects Firefox versions older than 125. The cited sources (Mozilla bug 1885828 and MFSA advisory MFSA2024-18) describe the root cause in JIT str...

CVE-2024-3856

Concretely, CVE-2024-3856 affects Mozilla Firefox

CVE-2024-3853

CVE-2024-3853 concerns Mozilla Firefox and is triggered by a use-after-free when a JavaScript realm is initializing while a garbage collection starts. Affected software: Firefox prior to version 125. Root cause: memory mismanagement during realm init and GC. Impact (as described in connected sour...

CVE-2024-3852

CVE-2024-3852: GetBoundName could return the wrong version of an object when JIT optimizations are applied, affecting Firefox <125, Firefox ESR <115.10, and Thunderbird

CVE-2024-3854

CVE-2024-3854 is a memory-safety issue in the Firefox/Thunderbird code path where the JIT optimizer mishandles certain switch statements, generating out-of-bounds reads. Affected are Firefox <125, Firefox ESR <115.10, and Thunderbird

CVE-2024-31451

CVE-2024-31451 affects DocsGPT (GPT-powered documentation chat). The root cause is an unauthenticated limited file write vulnerability in routes.py, exposing unauthorized file writes. Impact is described as limited file write with no broad system compromise within the provided docs. Remediation p...

CVE-2024-3067

CVE-2024-3067 (WooCommerce Google Feed Manager) : WordPress plugin vulnerable to SQL Injection via the id parameter in all versions up to 2.4.2 due to insufficient escaping in the SQL query; authenticated admins (and above) can inject additional SQL to extract data, and unauthenticated users coul...

CVE-2024-3367

Affected product: Checkmk with websphere_mq agent plugin. Vulnerable versions: Checkmk 2.0.0, 2.1.0, and any 2.2.0p26 and 2.3.0b5-era builds (i.e., <2.2.0p26 and

CVE-2024-3867

CVE-2024-3867 affects the WordPress theme archive-tainacan-collection, up to version 2.7.2. The root cause is Reflected Cross-Site Scripting due to using add_query_arg without proper escaping, enabling unauthenticated attackers to inject scripts in pages that execute when a user clicks a link. Pu...

CVE-2024-32625

CVE-2024-32625 concerns OffloadAMRWriter where a scalar field is not initialized, leaving an arbitrary value from prior computations. Multiple sources corroborate this, including the NVD entry for CVE-2024-32625 and related records. The vulnerability description identifies the root cause as an un...

CVE-2024-32634

CVE-2024-32634 is described as a logic contradiction in the huge memory unmapped area check that makes a code path dead/unreachable. Connected sources tie this to Asrmicro ASR180x series chips (CNNVD) and reiterate the issue as a logical dead-code condition (PT-Security). There is no publicly doc...

CVE-2024-32633

CVE-2024-32633 describes a flaw where an unsigned value can never be negative, causing eMMC full-disk test evaluations to always yield the same result. Connected sources identify the Asrmicro ASR Series (ASR360x, ASR160x, ASR180x) as affected. The initial entry provides a CVSSv3.1 base score of 4...

CVE-2024-32631

CVE-2024-32631 affects the ASR180X family (Asrmicro/Avantage Technology). The issue is a out-of-bounds read in the ciCCIOTOPT function that can cause incorrect computations. The PT-2024-24731 entry confirms affected product ASR180X but does not specify exact vulnerable versions. The exploitation ...

CVE-2024-32557

CVE-2024-32557 is the Stored XSS vulnerability in the WordPress plugin Exclusive Addons for Elementor, affecting all versions up to 2.6.9.2. Red Hat context confirms the issue arises from insufficient input sanitization and output escaping in the Post Grid Widget, enabling authenticated attackers...