8118 matches found
CVE-2023-38477
creationtimestamp| type| source ---|---|--- 2024-12-13 19:14:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113647109567788443...
CVE-2023-38475
creationtimestamp| type| source ---|---|--- 2024-12-13 18:59:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113647050566606196...
CVE-2024-54337
creationtimestamp| type| source ---|---|--- 2024-12-13 17:27:06+00:00| seen| https://t.me/cvedetector/12893 2024-12-14 03:30:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113649058192514298...
CVE-2024-54330
creationtimestamp| type| source ---|---|--- 2024-12-13 17:26:58+00:00| seen| https://t.me/cvedetector/12887 2024-12-14 03:15:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113648999133773181 2024-12-14 21:58:34+00:00| seen|...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52778: mptcp: deal with large GSO size bsc1224948. CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking bsc1232823...
Mozilla Thunderbird < 115.18
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.18. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-70 advisory. - Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and...
Mozilla Thunderbird < 115.18
The version of Thunderbird installed on the remote Windows host is prior to 115.18. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-70 advisory. - Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP frame-src bypass and DOM-based XS...
GHSA-CWQ6-MJMX-47P6
creationtimestamp| type| source ---|---|--- 2024-12-12 19:03:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113641404902137205...
CVE-2024-12312
creationtimestamp| type| source ---|---|--- 2024-12-12 07:06:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113638584212194781 2024-12-12 08:48:50+00:00| seen| https://t.me/cvedetector/12746...
CVE-2024-12497
A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...
CVE-2024-12497
A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...
CVE-2024-54510
creationtimestamp| type| source ---|---|--- 2024-12-12 00:44:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113637081216993908 2024-12-12 03:47:00+00:00| seen| https://t.me/cvedetector/12676...
CVE-2024-12497: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...
1000 Projects Attendance Tracking Management System 注入漏洞
1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Attendance Tracking Management System version 1.0, which originates from the parameter adminusername in the file...
CVE-2024-54491: Undefined Security Weakness
The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. A malicious application may be able to determine a user's current location...
CVE-2024-12497
CVE-2024-12497 affects 1000 Projects Attendance Tracking Management System 1.0. The vulnerability is an SQL injection in the file /admin/check_admin_login.php via the admin_user_name parameter. It can be triggered remotely and an exploit has been disclosed publicly. No remediation details are pro...
CVE-2024-12497 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection
A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...
CVE-2024-12497 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection
A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...
CVE-2024-37401
creationtimestamp| type| source ---|---|--- 2024-12-11 18:57:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113635719760148469 2024-12-11 19:02:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113635736547254863 2024-12-24 12:43:37+00:00| seen|...