CVE-2024-45204

creationtimestamp| type| source ---|---|--- 2024-12-03 18:19:49+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590271100041825 2024-12-04 02:12:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113592131480450507 2024-12-04 04:12:17+00:00| seen|...

CVE-2024-42457

creationtimestamp| type| source ---|---|--- 2024-12-03 18:19:49+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590271100041825 2024-12-04 02:12:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113592131466152509 2024-12-04 04:12:17+00:00| seen|...

CVE-2024-40717

creationtimestamp| type| source ---|---|--- 2024-12-03 18:19:48+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590271100041825 2024-12-04 01:42:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113592013374741284 2024-12-04 04:12:23+00:00| seen|...

CVE-2024-42451

creationtimestamp| type| source ---|---|--- 2024-12-03 18:19:48+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590271100041825 2024-12-04 01:42:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113592013401947604 2024-12-04 04:12:24+00:00| seen|...

CVE-2024-51727

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:14:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113607238660158313 2024-12-06 19:48:43+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-53375

creationtimestamp| type| source ---|---|--- 2024-12-02 22:04:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113585493417346973 2024-12-02 23:46:40+00:00| seen| https://t.me/cvedetector/11831 2024-12-19 12:33:28+00:00| published-proof-of-concept| https://t.me/proxybar/2436 2024-12-20...

GHSA-4CX5-89VM-833X veraPDF CLI has potential XXE (XML External Entity Injection) vulnerability

Impact Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution RCE vulnerability. Patches We are currently working on a patch that will be released when ready. Workarounds This doesn't affect the standa...

CVE-2024-53773

creationtimestamp| type| source ---|---|--- 2024-11-30 21:25:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113574014639899645 2024-11-30 21:28:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113574027651871250 2024-12-01 09:18:00+00:00| seen| https://t.me/cvedetector/117...

CVE-2024-11482

creationtimestamp| type| source ---|---|--- 2024-11-29 07:39:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113565104536407982 2024-11-29 07:42:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113565117531942043 2024-11-29 13:16:04+00:00| seen|...

CVE-2024-48651

creationtimestamp| type| source ---|---|--- 2024-11-29 05:05:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113564497981373405 2024-11-29 17:05:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113567330072557042 2024-12-03 07:54:31+00:00| seen|...

CVE-2024-52338

CVE-2024-52338 affects the Apache Arrow R package (versions 4.0.0–16.1.0). Deserialization of untrusted IPC/Parquet data allows arbitrary code execution. Affected users reading Arrow IPC, Feather, or Parquet data from untrusted sources are vulnerable. Upgrade to 17.0.0 or later to fix the issue. ...

CVE-2023-52922

creationtimestamp| type| source ---|---|--- 2024-11-28 15:12:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113561221342263509 2025-01-29 17:25:24+00:00| seen| https://bsky.app/profile/allelesecurity.bsky.social/post/3lgvig44ibk2a 2025-01-29 17:25:25+00:00| seen|...

CVE-2024-52951

creationtimestamp| type| source ---|---|--- 2024-11-27 14:37:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113555422037212953 2024-11-27 19:23:40+00:00| seen| https://schleuss.online/users/vulnbot/statuses/113556548358493435...

CVE-2024-42326

creationtimestamp| type| source ---|---|--- 2024-11-27 12:15:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113554863197449679 2024-11-27 12:18:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113554877452294601...

CVE-2024-42327

creationtimestamp| type| source ---|---|--- 2024-11-27 12:15:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113554863211557834 2024-11-27 12:18:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113554877465801853 2024-11-30 06:16:53+00:00| seen| https://t.me/icscert/969...

CVE-2023-32428

creationtimestamp| type| source ---|---|--- 2024-11-27 11:14:15+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/113554623981925778 2024-11-27 21:40:12+00:00| published-proof-of-concept| Telegram/6-1IPyyPQd9Lq9e3Kbx2tv3wjQwM5tJMZKH8SdXMOO0o 2024-12-01 03:52:54+00:00|...

CVE-2024-11789

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1615/ 2024-11-27 23:42:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113557567520790688 2024-12-03 11:00:00+00:00| seen|...

CVE-2024-11793

creationtimestamp| type| source ---|---|--- 2024-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1619/ 2024-11-27 23:57:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113557626580857834 2024-12-03 11:00:00+00:00| seen|...

DEBIAN-CVE-2024-11694

Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability...

CVE-2024-38833

creationtimestamp| type| source ---|---|--- 2024-11-26 12:01:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113549148342977152 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/1625 2024-11-26 13:04:11+00:00| seen| https://t.me/CyberBulletin/26626 2024-11-26 15:02:55+00:00|...