CVE-2023-5117

An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL...

CVE-2024-8950

creationtimestamp| type| source ---|---|--- 2024-12-25 12:28:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113713460590443642 2024-12-25 13:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le525aw33v2i 2024-12-25 14:38:54+00:00| seen|...

CVE-2024-12272

creationtimestamp| type| source ---|---|--- 2024-12-25 03:24:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113711319987931764 2024-12-25 04:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xmqldi22 2024-12-25 06:17:22+00:00| seen|...

GHSA-G63M-5VJV-WR3V

creationtimestamp| type| source ---|---|--- 2024-12-24 16:24:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113708724590672241...

CVE-2024-12744

creationtimestamp| type| source ---|---|--- 2024-12-24 16:24:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113708724559281732 2024-12-24 17:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le2x36pzu32l 2024-12-24 19:25:28+00:00| seen|...

CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

DEBIAN-CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

UBUNTU-CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

CVE-2024-53146

creationtimestamp| type| source ---|---|--- 2024-12-24 11:34:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113707586510111555 2024-12-24 12:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le2gd35awo2i 2024-12-24 14:24:36+00:00| seen|...

CVE-2024-53149

Technical details (affected product, root cause, impact, fix) are not publicly provided in the connected documents; monitor for updates.

CVE-2024-12468

creationtimestamp| type| source ---|---|--- 2024-12-24 08:22:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113706832024562575 2024-12-24 09:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le24ay3j2f2a 2024-12-24 11:03:28+00:00| seen|...

CVE-2024-41887

creationtimestamp| type| source ---|---|--- 2024-12-24 05:58:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113706262965997404 2024-12-24 06:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzsalgp4w2i 2024-12-24 07:42:38+00:00| seen|...

CVE-2024-4188241887

creationtimestamp| type| source ---|---|--- 2024-12-24 05:43:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113706203961821532 2024-12-24 05:58:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113706262965997404...

CVE-2024-12034

creationtimestamp| type| source ---|---|--- 2024-12-24 05:28:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113706144883033970 2024-12-24 06:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7onqo32f 2024-12-24 07:42:50+00:00| seen|...

CVE-2024-11885

creationtimestamp| type| source ---|---|--- 2024-12-24 05:28:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113706144867918874 2024-12-24 06:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7m47zo2i 2024-12-24 07:42:50+00:00| seen|...

CVE-2024-12518

creationtimestamp| type| source ---|---|--- 2024-12-24 04:33:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113705931156683699 2024-12-24 04:37:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113705944388003062 2024-12-24 05:15:25+00:00| seen|...

CVE-2024-12507

creationtimestamp| type| source ---|---|--- 2024-12-24 04:33:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113705931141640288 2024-12-24 04:37:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113705944371738030 2024-12-24 05:15:23+00:00| seen|...

CVE-2024-12617

creationtimestamp| type| source ---|---|--- 2024-12-24 04:33:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113705931190547781 2024-12-24 04:37:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113705944402586236 2024-12-24 05:15:28+00:00| seen|...

CVE-2024-12266

creationtimestamp| type| source ---|---|--- 2024-12-24 04:33:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113705931125851703 2024-12-24 04:37:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113705944355832590 2024-12-24 05:15:20+00:00| seen|...

VulnCheck KEV: CVE-2024-11305

A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability affects the function getstatuszigbee of the file /index.php/display/statuszigbee. The manipulation of the argument date leads to sql injection. The attack can be initiated...