82 matches found
CVE-2024-7347
creationtimestamp| type| source ---|---|--- 2024-08-14 18:13:29+00:00| seen| https://t.me/cvedetector/3153 2026-08-29 18:00:05+00:00| seen| https://t.me/angiesoftware/57 2026-08-30 00:00:53+00:00| seen| https://t.me/angiesoftware/57...
Internet Bug Bounty: CVE-2024-7347: Buffer overread in the ngx_http_mp4_module
CVE-2024-7347 was a vulnerability in the ngxhttpmp4module of NGINX Open Source and NGINX Plus. The vulnerability could have allowed an attacker to over-read NGINX worker memory, resulting in its termination, using a specially crafted MP4 file. The issue only affected NGINX if it was built with th...
Buffer overread in the ngx_http_mp4_module
Buffer overread in the ngxhttpmp4module Severity: low CVE-2024-7347 Not vulnerable: 1.27.1+, 1.26.2+ Vulnerable: 1.5.13-1.27.0...
K000140529: NGINX ngx_http_mp4_module vulnerability CVE-2024-7347
Security Advisory Description NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the...
Dell Inspiron 7347 BIOS Boot Service Override Vulnerability
Dell Inspiron 7347 BIOS is a system update driver for Dell Dell. Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS boot service override vulnerability that allows an attacker to override the EFIBOOTservice structure to execute arbitrary code in System Management Mode SMM...
CVE-2020-5376
Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...
CVE-2020-5376
Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...
CVE-2020-5376
Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...
CVE-2020-5376
CVE-2020-5376 affects Dell Inspiron 7347 BIOS prior to A13, where a UEFI BIOS Boot Services overwrite vulnerability allows a local attacker with memory access to overwrite EFI_BOOT_SERVICES and execute arbitrary code in System Management Mode (SMM). The issue is tied to BIOS versions before A13; ...
CVE-2020-5376
Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...
CVE-2019-6727
CVE-2019-6727 involves Foxit Reader (XFA remerge method) where a failure to validate the existence of an object before operating on it enables remote code execution after user visits a malicious page or opens a malicious file. The issue is characterized as a use-after-free/invalid object handling...
CVE-2019-7347
A Time-of-check Time-of-use TOCTOU Race Condition exists in ZoneMinder through 1.32.3 as a session remains active for an authenticated user even after deletion from the users table. This allows a nonexistent user to access and modify records add/delete Monitors, Users, etc...
CVE-2019-7347
A Time-of-check Time-of-use TOCTOU Race Condition exists in ZoneMinder through 1.32.3 as a session remains active for an authenticated user even after deletion from the users table. This allows a nonexistent user to access and modify records add/delete Monitors, Users, etc...
CVE-2019-7347
The CVE-2019-7347 entry concerns ZoneMinder up to version 1.32.3, where a TOCTOU race condition allows a user session to remain active after deletion from the users table. This enables a nonexistent user to access and modify records (e.g., adding/deleting Monitors or Users). The connected documen...
CVE-2015-7347
CVE-2015-7347 affects ZCMS 1.1 JavaServer Pages Content Management System. The connected sources confirm a cross-site scripting (XSS) vulnerability in ZCMS 1.1 (no detailed root cause in the provided docs). Public exploit references exist (Exploit-DB and PacketStorm) describing XSS and SQL Inject...
CVE-2016-7347
CVE-2016-7347 is rejected and does not represent an active vulnerability entry.