{"vulnerability": "cve-2024-3582", "sightings": [{"uuid": "c7f809ce-440e-4d1b-ba48-72c7bad1fdf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-35826", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "c12d7fe6-64db-4754-84da-3a123fe4455b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35826", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "66641536-5a8b-4746-a53c-102f46a4c454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35829", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2843", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-35829\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/lima: fix a memleak in lima_heap_alloc\n\nWhen lima_vm_map_bo fails, the resources need to be deallocated, or\nthere will be memleaks.\n\ud83d\udccf Published: 2024-05-17T13:41:16.290Z\n\ud83d\udccf Modified: 2025-01-23T21:46:27.559Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f2e80ac9344aebbff576453d5c0290b332e187ed\n2. https://git.kernel.org/stable/c/746606d37d662c70ae1379fc658ee9c65f06880f\n3. https://git.kernel.org/stable/c/f6d51a91b41704704e395de6839c667b0f810bbf\n4. https://git.kernel.org/stable/c/8e25c0ee5665e8a768b8e21445db1f86e9156eb7\n5. https://git.kernel.org/stable/c/4ab14eccf5578af1dd5668a5f2d771df27683cab\n6. https://git.kernel.org/stable/c/ec6bb037e4a35fcbb5cd7bc78242d034ed893fcd\n7. https://git.kernel.org/stable/c/04ae3eb470e52a3c41babe85ff8cee195e4dcbea", "creation_timestamp": "2025-01-23T22:03:41.000000Z"}, {"uuid": "e9e455cb-6093-424a-b91f-ac79a9b7083c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-35821", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2842", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-35821\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Set page uptodate in the correct place\n\nPage cache reads are lockless, so setting the freshly allocated page\nuptodate before we've overwritten it with the data it's supposed to have\nin it will allow a simultaneous reader to see old data.  Move the call\nto SetPageUptodate into ubifs_write_end(), which is after we copied the\nnew data into the page.\n\ud83d\udccf Published: 2024-05-17T13:23:24.350Z\n\ud83d\udccf Modified: 2025-01-23T21:48:10.927Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/4aa554832b9dc9e66249df75b8f447d87853e12e\n2. https://git.kernel.org/stable/c/778c6ad40256f1c03244fc06d7cdf71f6b5e7310\n3. https://git.kernel.org/stable/c/8f599ab6fabbca4c741107eade70722a98adfd9f\n4. https://git.kernel.org/stable/c/f19b1023a3758f40791ec166038d6411c8894ae3\n5. https://git.kernel.org/stable/c/142d87c958d9454c3cffa625fab56f3016e8f9f3\n6. https://git.kernel.org/stable/c/fc99f4e2d2f1ce766c14e98463c2839194ae964f\n7. https://git.kernel.org/stable/c/4b7c4fc60d6a46350fbe54f5dc937aeaa02e675e\n8. https://git.kernel.org/stable/c/17772bbe9cfa972ea1ff827319f6e1340de76566\n9. https://git.kernel.org/stable/c/723012cab779eee8228376754e22c6594229bf8f", "creation_timestamp": "2025-01-23T22:03:40.000000Z"}, {"uuid": "0c742d7f-feb7-41fc-9c1f-2f68f55264dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3582", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9523", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3582\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The UnGallery WordPress plugin through 2.2.4 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack\n\ud83d\udccf Published: 2024-05-09T06:00:02.529Z\n\ud83d\udccf Modified: 2025-03-28T23:44:31.413Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5a348b5d-13aa-40c3-9d21-0554683f8019/", "creation_timestamp": "2025-03-29T00:28:54.000000Z"}]}