CVE-2024-1801

In Progress® Telerik® Reporting versions prior to 2024 Q1 18.0.24.130, a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability...

CVE-2024-1856

In Progress® Telerik® Reporting versions prior to 2024 Q1 18.0.24.130, a code execution attack is possible by a remote threat actor through an insecure deserialization vulnerability...

CVE-2025-1022

creationtimestamp| type| source ---|---|--- 2025-02-05 05:08:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113949546296359039 2025-02-05 05:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhfsvjh7k62t 2025-02-05 06:48:35+00:00| seen|...

CVE-2024-6096

In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object injection via an insecure type resolution vulnerability...

CVE-2024-37179

SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application...

MariaDB 11.4.0 < 11.4.5

The version of MariaDB installed on the remote host is prior to 11.4.5. It is, therefore, affected by a vulnerability as referenced in the 11.4.5 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4...

CVE-2024-0832

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package...

CVE-2024-0213

A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service DoS, through exploiting a memory corruption issue in the TA service, which runs as root. This may also result in the disabling of event...

CVE-2024-8014

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible through object injection via an insecure type resolution vulnerability...

CVE-2024-8048

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible using object injection via insecure expression evaluation...

CVE-2025-0509

creationtimestamp| type| source ---|---|--- 2025-02-04 20:13:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113947442188091904 2025-02-04 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheuqt3inl27 2025-02-04 22:15:18+00:00| seen|...

Python Library Django 4.2.x < 4.2.18 / 5.0.x < 5.0.11 / 5.1.x < 5.1.5 DoS

The detected version of the Django Python package, Django, is 4.2.x prior to 4.2.18, 5.0.x prior to 5.0.11 or 5.1.x prior to 5.1.5. It is, therefore, affected by a denial of service vulnerability as disclosed in Django's January 14th 2025 security advisory. A lack of upper bound limit enforcement...

CVE-2025-24371 Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the blocksync protocol peers send their base and latest heights when they connect to a new node A, which is syncing to the tip of a network. base acts as a lower ground and informs A that the...

CVE-2025-24371 Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft

CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the blocksync protocol peers send their base and latest heights when they connect to a new node A, which is syncing to the tip of a network. base acts as a lower ground and informs A that the...

CVE-2025-20637

creationtimestamp| type| source ---|---|--- 2025-02-03 04:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhaonv5fbp2c 2025-02-03 07:46:48+00:00| seen| https://t.me/cvedetector/17046 2025-02-03 08:03:49+00:00| seen|...

CVE-2024-13216

creationtimestamp| type| source ---|---|--- 2025-01-31 05:23:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113921294156429587 2025-01-31 06:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdx2lmwe2n 2025-01-31 07:24:19+00:00|...

CVE-2024-12444

creationtimestamp| type| source ---|---|--- 2025-01-30 14:16:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodnhyp32f 2025-01-30 14:16:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113917730431983422...

CVE-2024-12299

creationtimestamp| type| source ---|---|--- 2025-01-30 14:16:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodio7ii2t 2025-01-30 14:16:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113917730403182409...

CVE-2025-23007

creationtimestamp| type| source ---|---|--- 2025-01-30 09:45:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113916663254527555 2025-01-30 11:18:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3471 2025-01-30 11:25:40+00:00| seen|...

snowflake-connector-python vulnerable to SQL Injection in write_pandas

Issue Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function from the snowflake.connector.pandastools module is vulnerable to SQL injection. This vulnerability affects versions 2.2.5 through 3.13.0. Snowflake fixed the issue in version 3.13.1...