CVE CyberSecurity Database News (Page 448)

Dec 17, 2024 Exploit

CVE-2024-51479 - Authorization Bypass in Next.js Middleware for Root-Level Pages

Published: June 2024 Severity: High Affected: Next.js (Before 14.2.15) Status: Patched in 14.2.15 and later Overview CVE-2024-51479 is a recent

Dec 17, 2024 SQL PHP

CVE-2024-55496 - SQL Injection in 100projects Bookstore Management System 1. (add_company.php Exploit)

A new vulnerability labeled as CVE-2024-55496 has been discovered in the 100projects Bookstore Management System PHP MySQL Project 1.. This vulnerability can allow attackers to

Dec 17, 2024

CVE-2024-54662 - Breaking Down the Dante SOCKS Proxy Security Flaw (And How to Stay Safe)

Dante is a widely used open-source SOCKS proxy server, trusted by system admins worldwide. In recent news, CVE-2024-54662 was disclosed—a security vulnerability in Dante

Dec 17, 2024 API

CVE-2024-49819 - Exposing Secrets—A Deep Dive into IBM Security Guardium Key Lifecycle Manager’s Information Disclosure Flaw

On May 7, 2024, IBM published a security advisory CVE-2024-49819, revealing a critical vulnerability in IBM Security Guardium Key Lifecycle Manager (SKLM) versions 4.1,

Dec 17, 2024 API

CVE-2024-49818 - IBM Security Guardium Key Lifecycle Manager Information Disclosure Vulnerability Explained

CVE-2024-49818 is a recently disclosed vulnerability in IBM Security Guardium Key Lifecycle Manager (SKLM), affecting versions 4.1, 4.1.1, 4.2., and 4.