CVE-2022-23961

creationtimestamp| type| source ---|---|--- 2024-11-18 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-18 2025-01-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-28 2025-01-29 00:00:00+00:00| exploited| The Shadowserver...

CVE-2024-11734

creationtimestamp| type| source ---|---|--- 2024-11-16 15:59:00+00:00| seen| https://bugzilla.redhat.com/showbug.cgi?id=2328846 2025-01-14 08:38:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113825801162950648 2025-01-14 09:10:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14...

firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill)

A remote code execution vulnerability was found in Firefox and Thunderbird. The Mozilla Foundation Security Advisories state: An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines...

PT-2024-41057 · Unknown · Qbittorrent

Name of the Vulnerable Software and Affected Versions: qBittorrent affected versions not specified Description: The issue concerns the failure to verify SSL certificates in the DownloadManager class. Specifically, if the verification of a certificate failed, the application would log an error and...

CVE-2020-7796

creationtimestamp| type| source ---|---|--- 2024-11-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-09 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-17 00:00:00+00:00| exploited| The Shadowserver...

CVE-2024-50078

creationtimestamp| type| source ---|---|--- 2024-10-29 03:03:55+00:00| seen| https://t.me/cvedetector/9241...

RLSA-2024:8025 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...

RockyLinux 8 : thunderbird (RLSA-2024:8024)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8024 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 Tenable has extracted the preceding description block directly from the RockyLin...

Updated firefox packages fix security vulnerabilities

The updated package provides Firefox 128 for all mandatory arches of Mageia x8664, i586 and aarch64, fixing several bugs, including security vulnerabilities, for i586 and aarch64: Fullscreen notification dialog can be obscured by document content. CVE-2024-7518 Out of bounds memory access in...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2024:3731-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3731-1 advisory. Update to Mozilla Thunderbird 128.3.1 MFSA 2024-52, bsc1231413: - CVE-2024-9680: Fixed use-after-free in...

openSUSE Security Advisory (SUSE-SU-2024:3731-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.3.1 MFSA 2024-52, bsc1231413: CVE-2024-9680: Fixed use-after-free in Animation timeline bmo1923344 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like Ya...

CVE-2024-49237

Cross-Site Request Forgery CSRF vulnerability in ahmeti Ahmeti Wp Timeline ahmeti-wp-timeline allows Stored XSS.This issue affects Ahmeti Wp Timeline: from n/a through = 5.1...

CVE-2024-49237

Cross-Site Request Forgery CSRF vulnerability in Ahmet Imamoglu Ahmeti Wp Timeline allows Stored XSS.This issue affects Ahmeti Wp Timeline: from n/a through 5.1...

CVE-2024-49237

CVE-2024-49237 — WordPress plugin Ahmeti Wp Timeline (versions

CVE-2024-49237 WordPress Ahmeti Wp Timeline plugin <= 5.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ahmet Imamoglu Ahmeti Wp Timeline allows Stored XSS.This issue affects Ahmeti Wp Timeline: from n/a through 5.1...

CVE-2024-49237 WordPress Ahmeti Wp Timeline plugin <= 5.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ahmeti Ahmeti Wp Timeline ahmeti-wp-timeline allows Stored XSS.This issue affects Ahmeti Wp Timeline: from n/a through = 5.1...

WordPress plugin Ahmeti Wp Timeline 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-33374 · WordPress · Ahmeti Wp Timeline

Name of the Vulnerable Software and Affected Versions: Ahmeti Wp Timeline versions prior to 5.1 Description: A Cross-Site Request Forgery CSRF issue exists in Ahmet Imamoglu Ahmeti Wp Timeline, allowing Stored XSS. Recommendations: For versions prior to 5.1, update to a version that includes a fi...

Tor Browser and Firefox users should update to fix actively exploited vulnerability

Mozilla has announced a security fix for its Firefox browser which also impacts the closely related Tor Browser. The new version fixes one critical security vulnerability which is reportedly under active exploitation. To address the flaw, both Mozilla and Tor recommend that users update their...