6745 matches found
CVE-2024-44248
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A user with screen sharing access may be able to view another user's screen...
CVE-2024-52862
creationtimestamp| type| source ---|---|--- 2024-12-11 00:11:25+00:00| seen| https://t.me/cvedetector/12609 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18 16:44:34+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764...
CVE-2024-52860
creationtimestamp| type| source ---|---|--- 2024-12-11 00:11:24+00:00| seen| https://t.me/cvedetector/12607 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18 16:44:34+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764...
CVE-2024-49095
creationtimestamp| type| source ---|---|--- 2024-12-10 17:33:56+00:00| seen| https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review 2024-12-10 19:52:34+00:00| seen| https://infosec.exchange/users/cve/statuses/113630272111799784 2025-01-08 19:16:25+00:00| seen|...
MISP 安全漏洞
MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP 2.5.2 and earlier versions,...
CVE-2024-49416
Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information...
CVE-2024-53745 WordPress Social Sharing Buttons By Cosmos Farm plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 코스모스팜 – Cosmosfarm 소셜 공유 버튼 By 코스모스팜 allows Stored XSS.This issue affects 소셜 공유 버튼 By 코스모스팜: from n/a through 1.9...
CVE-2024-53745
CVE-2024-53745 : WordPress plugin “소셜 공유 버튼 By 코스모스팜” (Cosmosfarm social share buttons) contains a Stored XSS due to improper neutralization of input during web page generation. Affected: Cosmosfarm social share button plugin (WordPress) versions n/a through 1.9. Impact as stated: cross-site scri...
PT-2024-35854 · 코스모스팜 · Cosmosfarm 소셜 공유 버튼
Name of the Vulnerable Software and Affected Versions: 코스모스팜 – Cosmosfarm 소셜 공유 버튼 By 코스모스팜 versions n/a through 1.9 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS. Recommendations: F...
CVE-2024-11252
CVE-2024-11252 concerns the Social Sharing Plugin – Sassy Social Share for WordPress. The Red Hat and NVD entries describe a Reflected Cross-Site Scripting vulnerability in the heateor_mastodon_share parameter, affecting all versions up to and including 3.3.69. The issue stems from insufficient i...
PT-2024-33673 · Unknown · Plexripper
Name of the Vulnerable Software and Affected Versions: PlexRipper versions prior to 0.24.0 Description: PlexRipper's open CORS policy allows attackers to gain sensitive information by getting the user to access the attacker's domain. This enables an attacking website to access the...
The vulnerability of the cifs component in the Linux operating system’s kernel allows a hacker to increase their privileges within the system.
The vulnerability of the cifs component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...
DEBIAN-CVE-2024-53095
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. Recently, we got a customer report that CIFS triggers oops while reconnecting to a server. 0 The workload runs on Kubernetes, and some pods mount CIFS servers in non-root...
macOS 14.x < 14.7.1 Multiple Vulnerabilities (121570)
The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7.1. It is, therefore, affected by multiple vulnerabilities: - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An...
MAL-2024-10864 Malicious code in spid-sharing-panel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c50247128ddc6b0f537f31cc3dc2ab87a15e41c40657a63a978fa0037bd8f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in spid-sharing-panel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c50247128ddc6b0f537f31cc3dc2ab87a15e41c40657a63a978fa0037bd8f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-JP37-5QHW-MFFW Sharks has a Bias of Polynomial Coefficients in Secret Sharing
Affected versions of this crate allowed for a bias when generating random polynomials for Shamir Secret Sharing, where instead of being within the range 0, 255 they were instead in the range 1, 255. A description from Cure53, who originally found the issue, is available: The correct method to...
cryptoballot (>=0.2.0, <=0.3.1), secret-sharing-cli (>=0.1.0, <=0.1.2) +1 more potentially affected by unknown CVE via sharks (>=0.3.3, <=0.4.3)
sharks CARGO version =0.3.3, =0.2.0, =0.1.0, =0.1.0, =0.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-JP37-5QHW-MFFW...
Sharks has a Bias of Polynomial Coefficients in Secret Sharing
Affected versions of this crate allowed for a bias when generating random polynomials for Shamir Secret Sharing, where instead of being within the range 0, 255 they were instead in the range 1, 255. A description from Cure53, who originally found the issue, is available: The correct method to...