18 matches found
CVE-2026-24097
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 EOL allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/registerexisting endpoint, which could lead to information disclosure...
UBUNTU-CVE-2026-24097
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 EOL allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/registerexisting endpoint, which could lead to information disclosure...
CVE-2025-24097
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to read arbitrary file metadata...
CVE-2025-24097
creationtimestamp| type| source ---|---|--- 2025-04-02 14:18:11+00:00| seen| https://t.me/truesecator/6902...
CVE-2025-24097
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to read arbitrary file metadata...
CVE-2024-9714
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...
CVE-2024-9714 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...
CVE-2024-24097
creationtimestamp| type| source ---|---|--- 2024-03-12 22:21:47+00:00| seen| https://t.me/ctinow/206220 2024-03-12 22:26:55+00:00| seen| https://t.me/ctinow/206232...
CVE-2024-24097
Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...
CVE-2024-24097
CVE-2024-24097 involves a Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 . The issue stems from insufficient input filtering/escaping in the News Feed, allowing an attacker to inject and execute arbitrary scripts in a victim’s browser. Multiple connected so...
Adobe After Effects < 18.4.5 / 22.0 < 22.2.1 Arbitrary Code Execution (APSB22-17)
The version of Adobe After Effects installed on the remote host is prior to 18.4.5, or 22.x prior to 22.2.1. It is, therefore, affected by multiple stack-based buffer overflow flaws which could lead to arbitrary code execution in the context of the current user. Note that Nessus has not tested fo...
CVE-2023-24097
TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formPasswordAuth. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects...
CVE-2023-24097
CVE-2023-24097 affects TrendNet Wireless AC Easy-Upgrader TEW-820AP (v1.0R, firmware 1.01.B01). Root cause: a stack overflow in the /formPasswordAuth endpoint via the submit-url parameter, leading to arbitrary code execution. Cvss3.1 base score 8.8 (HIGH) with network attack vector, low complexit...
CVE-2022-24097
creationtimestamp| type| source ---|---|--- 2022-03-11 20:15:01+00:00| seen| https://t.me/cibsecurity/38802...
CVE-2022-24097
Adobe After Effects versions 22.2 and earlier and 18.4.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2022-24097 Adobe After Effects Out-of-bounds Write could lead to Arbitrary code execution
Adobe After Effects versions 22.2 and earlier and 18.4.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2022-24097
CVE-2022-24097 affects Adobe After Effects versions 22.2 and earlier, and 18.4.4 and earlier, due to an out-of-bounds write that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). The fix is in Adobe APSB22-...
Adobe After Effects < 18.4.5 / 22.0 < 22.2.1 Arbitrary Code Execution (APSB22-17) (deprecated)
The version of Adobe After Effects installed on the remote Windows host is prior to 18.4.5, or 22.x prior to 22.2.1. It is, therefore, affected by multiple stack-based buffer overflow flaws which could lead to arbitrary code execution in the context of the current user. Note that Nessus has not...