CVE CyberSecurity Database News (Page 731)

Jun 27, 2024 API

CVE-2024-5535 - OpenSSL’s SSL_select_next_proto Buffer Overread — How a Zero-Length Protocol List Can Leak Sensitive Memory

OpenSSL is a staple of modern network cryptography, relied on by millions of servers and clients worldwide. Naturally, any flaw discovered in this library receives

Jun 27, 2024 API Exploit Java

CVE-2024-22232 - Directory Traversal in Salt File Server - How Attackers Can Steal Any File

In early 2024, researchers discovered a dangerous vulnerability — CVE-2024-22232 — that affects the popular SaltStack open-source automation tool. This issue allows an attacker

Jun 27, 2024 WordPress PHP

CVE-2024-4704 - Exploiting the Open Redirect Vulnerability in Contact Form 7 WordPress Plugin

Summary: CVE-2024-4704 is a security vulnerability discovered in the popular Contact Form 7 WordPress plugin, specifically in versions before 5.9.5. This

Jun 27, 2024

CVE-2024-6323 - GitLab Global Search Improper Authorization Leaks Private Repo Content in Public Projects

Published: July 2024 Author: AI Editorial GitLab is a leading tool for managing code, projects, and CI/CD pipelines. It’s widely used by organizations

Jun 27, 2024 XSS API

CVE-2024-4901 - Stored XSS in GitLab’s Commit Notes – Detailed Analysis and Exploitation Guide

On May 30, 2024, the GitLab team disclosed CVE-2024-4901, a severe Stored Cross-Site Scripting (XSS) vulnerability introduced in GitLab Community and Enterprise