编号撤回

Nix is a powerful package manager from the Nix open source. It is used for making packages. This CVE number has been withdrawn...

Dell InsightIQ 访问控制错误漏洞

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. Dell InsightIQ suffers from an Access Control Error vulnerability that stems from incorrect access control. A highly privileged attacker with local access rights could exploit the vulnerability to cause an elevation of...

CVE-2024-44849

creationtimestamp| type| source ---|---|--- 2024-09-09 20:39:58+00:00| seen| https://t.me/cvedetector/5117 2024-09-10 11:45:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8471 2024-09-21 16:06:49+00:00| published-proof-of-concept| https://t.me/realLulzSec/18823 2024-09-21...

CVE-2024-45620

A vulnerability was found in the pkcs15-init tool in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. When buffers are partially filled with data, initialized parts of the buffer can be incorrectly accesse...

CVE-2024-6232

creationtimestamp| type| source ---|---|--- 2024-09-03 15:48:09+00:00| seen| https://t.me/cvedetector/4683 2025-03-20 18:20:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8248 2025-07-08 07:10:39+00:00| seen|...

CVE-2024-42471

creationtimestamp| type| source ---|---|--- 2024-09-02 21:24:29+00:00| seen| https://t.me/cvedetector/4654 2025-01-22 16:02:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2571 2025-04-24 23:00:06+00:00| published-proof-of-concept|...

WordPress Custom Query Blocks plugin <= 5.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 4rCanJ0x! in WordPress Plugin Custom Query Blocks versions = 5.3.1...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2024-36915)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

roadsafety.kerala.gov.in Cross Site Scripting vulnerability OBB-3960253

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sgpe.sea.sc.gov.br Cross Site Scripting vulnerability OBB-3960247

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-41992

creationtimestamp| type| source ---|---|--- 2024-08-22 08:53:06+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/759 2024-08-22 12:21:40+00:00| published-proof-of-concept| https://t.me/HackingInsights/10926 2024-08-23 23:52:29+00:00| published-proof-of-concept|...

BELL-CVE-2024-42310

Bulletin has no description...

BELL-CVE-2024-42291

Bulletin has no description...

JFrog 安全漏洞

JFrog is an application from JFrog, Inc. that provides an end-to-end pipeline to control the flow of binaries from build to production. A security vulnerability exists in JFrog. An attacker exploiting this vulnerability could disclose any user's terminal server command history...

donovanandwinslow.com Cross Site Scripting vulnerability OBB-3959988

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

csjss.edu.hk Cross Site Scripting vulnerability OBB-3959931

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-39804

creationtimestamp| type| source ---|---|--- 2024-08-21 12:30:05+00:00| seen| https://t.me/truesecator/6115 2024-12-18 22:38:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113676225005041941 2024-12-19 01:25:08+00:00| seen| https://t.me/cvedetector/13279 2026-07-26 02:02:06+00:00| see...

Multiple vulnerabilities in LogonTracer

Overview LogonTracer provided by JPCERT Coordination Center is a tool to investigate malicious Windows logon by visualizing and analyzing Windows event log. LogonTracer contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2018-16165 CVSS v3...

CVE-2023-52906

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmpls: Fix warning during failed attribute validation The 'TCAMPLSLABEL' attribute is of 'NLAU32' type, but has a validation type of 'NLAVALIDATEFUNCTION'. This is an invalid combination according to the comment abov...

reference.chuyan.hk Cross Site Scripting vulnerability OBB-3959764

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...