exploit

2024-11-30 Vulnerability : This article describes a critical vulnerability (CVE-2024-53911) in Veritas Enterprise Vault servers before version 15.2. An attacker […]

2024-11-30 : A critical vulnerability (CVE-2024-53915) exists in Veritas Enterprise Vault servers before version 15.2. This vulnerability allows remote attackers

2024-11-30 Vulnerability : This recently discovered vulnerability (CVE-2024-21432) affects the Windows Update Stack and allows attackers to potentially elevate their

2024-11-30 : This article details a critical remote code execution (RCE) vulnerability (CVE-2024-21334) affecting Open Management Infrastructure (OMI). An unauthenticated

2024-11-30 : This article describes a Denial-of-Service (DoS) vulnerability (CVE-2024-21392) affecting .NET 7.0 and 8.0 applications. A successful exploit could

2024-11-30 : This article details a vulnerability (CVE-2024-21427) in Windows Kerberos that allows attackers to bypass security features. It is

2024-11-30 Platform: WordPress Version: ProfileGrid plugin versions up to 5.9.3.6 Vulnerability: Unauthorized data modification Severity: Medium (CVSS: 6.5) Date: November

2024-11-30 : This article details a vulnerability (CVE-2024-21433) in the Windows Print Spooler service. This vulnerability allows an attacker to

2024-11-30 : This article describes a vulnerability (CVE-2024-21419) in Microsoft Dynamics 365 (on-premises) that allows for Cross-site Scripting (XSS) attacks.

2024-11-30 Platform: WordPress Version: Ashe theme versions up to 2.243 Vulnerability: Reflected Cross-Site Scripting (XSS) Severity: MEDIUM (CVSS: 6.1) Date:

2024-11-30 : The MailChimp Forms by MailMunch plugin for WordPress has a critical vulnerability (CVE-2024-8726) that allows attackers to inject

2024-11-30 : This article describes a critical vulnerability (CVE-2024-53909) in Veritas Enterprise Vault servers before version 15.2. The vulnerability allows

2024-11-29 : A critical vulnerability (CVE-2024-8825) exists in PDF-XChange Editor that allows remote attackers to execute malicious code on a

2024-11-29 This blog post analyzes CVE-2024-8830, a vulnerability in PDF-XChange Editor that allows remote attackers to execute arbitrary code. Here’s

2024-11-29 : This article describes a critical vulnerability (CVE-2024-8833) in PDF-XChange Editor that allows remote attackers to execute arbitrary code

2024-11-29 Vulnerability: TIF File Parsing Out-Of-Bounds Read (Information Disclosure) CVE(id): CVE-2024-8834 Severity: Medium Date: November 22, 2024 What Undercode Says:

2024-11-29 Vulnerability : This article describes a vulnerability (CVE-2024-8828) in PDF-XChange Editor that allows remote attackers to disclose sensitive information

2024-11-29 : A critical vulnerability (CVE-2024-8835) exists in PDF-XChange Editor that allows remote attackers to disclose sensitive information on affected

2024-11-29 : This article describes a vulnerability (CVE-2024-8837) in PDF-XChange Editor that allows remote attackers to execute malicious code on

2024-11-29 : This article describes a critical vulnerability (CVE-2024-8831) in PDF-XChange Editor that allows remote attackers to execute arbitrary code

2024-11-29 : This article describes a vulnerability (CVE-2024-8829) in PDF-XChange Editor that allows attackers to potentially disclose sensitive information on

2024-11-29 : This article details a critical vulnerability (CVE-2024-8826) in PDF-XChange Editor. A remote attacker can exploit this vulnerability by

2024-11-29 : This article describes a critical vulnerability (CVE-2024-9249) in Foxit PDF Reader. An attacker can exploit this flaw by

2024-11-29 Platform: Foxit PDF Reader Version: Not specified in this source Vulnerability: Annotation Use-After-Free Severity: Critical Date: November 22, 2024

2024-11-29 Vulnerability : This critical vulnerability (CVE-2024-9245) allows local attackers to gain escalated privileges on systems running Foxit PDF Reader.

2024-11-29 Vulnerability : This critical vulnerability (CVE-2024-9244) allows local attackers to escalate privileges on Foxit PDF Reader installations. An attacker

2024-11-29 : This critical vulnerability (CVE-2024-9253) in Foxit PDF Reader allows remote attackers to disclose sensitive information on targeted systems.

2024-11-29 : This article describes a critical vulnerability (CVE-2024-9255) in Foxit PDF Reader that allows remote attackers to execute malicious

2024-11-29 Vulnerability : This critical vulnerability (CVE-2024-9247) allows remote attackers to execute malicious code on a受害 (shàihài – targeted) system

2024-11-29 : This critical vulnerability (CVE-2024-9256) in Foxit PDF Reader allows remote attackers to steal sensitive information by tricking users

2024-11-29 : This critical vulnerability (CVE-2024-9246) in Foxit PDF Reader allows remote attackers to steal sensitive information from a targeted

2024-11-29 Vulnerability : This critical vulnerability (CVE-2024-9252) in Foxit PDF Reader allows remote attackers to disclose sensitive information on affected

2024-11-29 Vulnerability : This critical vulnerability (CVE-2024-9248) exists in Foxit PDF Reader and allows remote attackers to execute malicious code

2024-11-29 Vulnerability : This article describes a critical vulnerability (CVE-2024-28987) affecting SolarWinds Web Help Desk (WHD) software. The vulnerability arises

2024-11-29 Platform: SolarWinds Serv-U Version: All versions up to 15.4.2 Hotfix 1 Vulnerability: Directory Traversal Severity: Critical Date: June 6,

2024-11-29 : A critical vulnerability (CVE-2024-3273) exists in certain D-Link NAS devices (DNS-320L, DNS-325, DNS-327L, DNS-340L) that are no longer

2024-11-29 Vulnerability : This article describes a vulnerability (CVE-2024-30051) in the Windows Desktop Window Manager (DWM) Core Library. It allows

2024-11-29 : A critical vulnerability (CVE-2024-32896) exists in Android due to a logic error that allows local attackers to escalate

2024-11-29 Platform: IrfanView Version: All versions Vulnerability: Heap-based buffer overflow due to SVG file parsing Severity: Critical (CVSS score: 7.8)

2024-11-29 : A critical vulnerability (CVE-2024-11506) exists in IrfanView that allows remote attackers to execute malicious code on affected systems.

2024-11-29 : This article describes a critical vulnerability (CVE-2024-11508) in IrfanView that allows remote attackers to execute malicious code on

2024-11-29 This article describes a critical vulnerability (CVE-2024-11507) in IrfanView that allows remote attackers to execute arbitrary code on a

2024-11-29 Vulnerability : This critical vulnerability in Foxit PDF Reader allows remote attackers to execute arbitrary code on an affected

2024-11-29 : This article describes CVE-2024-30088, a critical Time-Of-Check Time-Of-Use (TOCTU) race condition vulnerability in the Microsoft Windows Kernel. Attackers

2024-11-29 Platform: Windows MSHTML Platform Version: (Not specified in the provided information) Vulnerability: Security Feature Bypass Severity: Critical (CVSS v3

2024-11-29 Platform: Oracle CRM Technical Foundation (Oracle E-Business Suite) Version: 12.2.3 – 12.2.13 Vulnerability: Partial Denial of Service (DoS) Severity:

2024-11-29 Vulnerability : This article describes a critical vulnerability (CVE-2024-20937) in Oracle JD Edwards EnterpriseOne Tools (Monitoring and Diagnostics SEC

2024-11-29 : This article describes a critical vulnerability (CVE-2024-20964) affecting Oracle MySQL Server versions 8.0.35 and prior, and 8.2.0 and

2024-11-28 Platform: Hugging Face Transformers Version: Not specified Vulnerability: Deserialization of Untrusted Data (Remote Code Execution) Severity: Critical Date: November

2024-11-28 : This article describes a vulnerability (CVE-2024-53086) in the Linux kernel related to lock handling during the `xe_sync_in_fence_get` function

2024-11-28 : This article describes a vulnerability (CVE-2024-50176) in the Linux kernel’s remoteproc driver. The issue stems from improper error

2024-11-28 This article describes a vulnerability (CVE-2024-50187) in the Linux kernel related to performance monitors. When a file descriptor is

2024-11-28 This article describes a vulnerability (CVE-2024-53087) in the Linux kernel related to the handling of exec queues. An error

2024-11-28 This article describes a vulnerability (CVE-2024-53083) in the Linux kernel that affects the USB type-C functionality. Here’s a summarized

2024-11-28 : A race condition vulnerability (CVE-2024-53085) has been identified in the Linux kernel. This vulnerability could potentially allow an

2024-11-28 Platform: Linux Kernel Version: Not specified (all versions potentially affected) Vulnerability: Access to uninitialized variable in tick_ctx_cleanup() function Severity:

2024-11-28 : A critical vulnerability (CVE-2024-11394) exists in Hugging Face Transformers that allows remote attackers to execute malicious code on

2024-11-28 : This article describes a vulnerability (CVE-2024-50175) in the Linux kernel related to video processing. It affects the handling

2024-11-28 Vulnerability : This CVE details a recently fixed vulnerability in the Linux kernel related to the cpufreq driver for

2024-11-28 This article describes a vulnerability (CVE-2024-50174) in the Linux kernel related to a race condition when converting group handles

2024-11-28 Platform: Cilium Version: v1.16.0 – v1.16.3 (inclusive) Vulnerability: Layer 7 policy enforcement bypass with port ranges Severity: Medium Date:

2024-11-28 MLflow, an open-source platform for managing the machine learning lifecycle, has a critical vulnerability that could allow local attackers

2024-11-28 This article describes a low severity vulnerability in the `deno_doc` crate that could lead to Cross-site Scripting (XSS) attacks

2024-11-28 Platform: Querydsl (with JPA) Version: Not specified (but vulnerable in versions up to 6.8.0) Vulnerability: HQL Injection (Blind) Severity:

2024-11-28 : SPEmailHandler-PHP, a PHP script for sending emails, has a high-severity vulnerability that allows attackers to send arbitrary emails.

2024-11-28 : The open-source Python library `aiocpa` has been found to contain malicious code designed to steal cryptocurrency wallet credentials.

2024-11-28 Platform: sigstore-java Version: v1.0.0 Vulnerability: Improper verification of log entry in bundle verification (CVE-2024-53267) Severity: Critical Date: November 26,

2024-11-28 : A vulnerability has been discovered in the libre-chat application, specifically in the `upload_documents` method of version 0.0.6. This

2024-11-28 : A security vulnerability has been identified in lakeFS that could allow unauthorized access to user accounts. If a

2024-11-28 : The Jenkins Filesystem List Parameter Plugin versions prior to 0.0.15 are vulnerable to a path traversal vulnerability. This

2024-11-28 Keycloak versions 26 and earlier are susceptible to a critical denial-of-service (DoS) vulnerability (CVE-2023-4634). This vulnerability arises from improper

2024-11-28 A moderate-severity Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the authentication flow of the @dapperduckling/keycloak-connector-server package. This issue,

2024-11-28 : A critical vulnerability has been identified in the Jenkins Simple Queue Plugin. This stored cross-site scripting (XSS) vulnerability,

2024-11-28 Platform: GitHub CLI Version: Prior to 2.63.0 Vulnerability: Token Leak Severity: Critical Date: November 28, 2024 (based on search

2024-11-28 Platform: Devolutions.XTS.NET Version: All versions Vulnerability: Timing Attack Severity: Moderate Date: November 27, 2024 What Undercode Says: A vulnerability

2024-11-28 This vulnerability exists in the `shouldHideDocument` function of the `ExternalStorageProvider.java` file. It occurs due to improper unicode normalization, allowing

2024-11-28 : Apple has addressed a critical security vulnerability in Safari, iOS, iPadOS, macOS, and visionOS that could lead to

2024-11-28 : A critical vulnerability has been identified in vCenter Server that could allow a malicious actor with network access

2024-11-28 Platform: Oracle Agile PLM Framework Version: 9.3.6 Vulnerability: Information Disclosure Severity: HIGH Date: November 26, 2024 What Undercode Says:

2024-11-28 This article describes a critical SQL injection vulnerability (CVE-2024-9465) affecting Palo Alto Networks Expedition. Vulnerability : Platform: Palo Alto

2024-11-28 This article details a critical security vulnerability (CVE-2024-XXXX, to be assigned) in CyberPanel versions before 5b08cd6d53f4dbc2107ad9f555122ce8b0996515. This flaw allows

2024-11-28 Progress Kemp LoadMaster suffers from a critical security vulnerability (CVE-2024-1212) that allows unauthenticated remote attackers to execute arbitrary commands

2024-11-28 : A critical vulnerability (CVE-2024-5910) exists in Palo Alto Networks Expedition, a tool for migrating firewall configurations. This vulnerability

2024-11-28 A security vulnerability exists in Microsoft Windows that could allow an attacker to steal a user’s NTLMv2 hash. This

2024-11-28 Platform: Cisco Adaptive Security Appliance (ASA) Version: Not specified Vulnerability: Cross-site Scripting (XSS) Severity: Critical Date: March 18, 2014

2024-11-28 : A vulnerability in Palo Alto Networks PAN-OS software allows attackers with administrator access to the management interface to

2024-11-28 : A critical cross-site scripting (XSS) vulnerability was identified and addressed in multiple Apple products, including Safari, iOS, iPadOS,

2024-11-28 Platform: Hugging Face Transformers MaskFormer Model Version: All versions before a fix is applied Vulnerability: Deserialization of Untrusted Data

2024-11-28 This article describes a vulnerability (CVE-2024-50304) resolved in the Linux kernel. It relates to a potential issue with how

2024-11-28 Linux Kernel, Memory Corruption Vulnerability, CVE-2024-50187 (Moderate) This article describes a vulnerability (CVE-2024-50187) in the Linux kernel’s drm/vc4 driver.

2024-11-28 This article describes a moderate severity vulnerability in the go-gh library (version prior to 2.11.1). : – The `auth.TokenForHost`

2024-11-28 Platform: GitHub CLI Version: Prior to 2.63.0 Vulnerability: Token Leak Severity: Critical Date: Not specified What Undercode Says: This

2024-11-28 SPEmailHandler-PHP, a PHP script designed to handle email sending, has been found to be vulnerable to a high-severity security

2024-11-27 This article describes a vulnerability (CVE-2024-50173) in the Linux kernel related to accessing an uninitialized variable. This could potentially

2024-11-27 : This vulnerability exists in the Linux Vulnerability Details: Platform: Linux Kernel Version: Not specified (potentially all versions with

2024-11-27 : This article describes a vulnerability (CVE-2024-50174) in the Linux kernel related to a race condition when converting a

2024-11-27 : This article discusses a critical remote code execution (RCE) vulnerability, CVE-2023-23367, affecting multiple versions of the ServiceNow Vancouver