Lucene search
+L

12816 matches found

CVE
CVE
added 2024/07/29 10:17 p.m.83 views

CVE-2024-40799

CVE-2024-40799 is an out-of-bounds read vulnerability fixed by Apple in multiple OS updates. Affected platforms include iOS 16.7.9 / 17.6, iPadOS 16.7.9 / 17.6, macOS Ventura 13.6.8, Monterey 12.7.6, macOS Sonoma 14.6, and the watchOS 10.6, tvOS 17.6, visionOS 1.3 lineups. The issue occurs when p...

7.1CVSS5.8AI score0.00426EPSS
SaveExploits0References31Affected Software6
Vulnrichment
Vulnrichment
added 2024/07/29 10:17 p.m.20 views

CVE-2024-40784

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may lead to unexpected app...

5.9AI score0.00293EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/07/29 12:0 a.m.1 views

PT-2024-29064 · Apple · Ipados +8

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.7.9 iPadOS versions prior to 16.7.9 macOS Ventura versions prior to 13.6.8 macOS Monterey versions prior to 12.7.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 tvOS versions...

5.5CVSS5.9AI score0.00336EPSS
SaveExploits0References21
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.5 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS prior to version 17.6 and iPadOS prior to version 17.6, which stems from the fact...

5.5CVSS6.2AI score0.0776EPSS
SaveExploits0References6
OSV
OSV
added 2024/07/26 11:8 a.m.7 views

OESA-2024-1910 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Heap-based buffer overflow...

8.4CVSS7.9AI score0.00281EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/25 7:15 p.m.13 views

CVE-2024-40318

An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploading a crafted file...

7.2CVSS7.7AI score
SaveExploits0References1
NVD
NVD
added 2024/07/25 7:15 p.m.30 views

CVE-2024-40318

An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploading a crafted file...

7.2CVSS0.01183EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2024/07/25 12:0 a.m.9 views

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Reader programs for viewing and editing PDF files stem from inadequate access control mechanisms, allowing attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Acrobat Reader PDF viewer/editor programs is related to lack of access control mechanisms. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.00362EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2024/07/25 12:0 a.m.22 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in a buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

7.8CVSS6.3AI score0.00423EPSS
SaveExploits0References11Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/07/25 12:0 a.m.11 views

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS6.4AI score0.00339EPSS
SaveExploits0References12Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/07/25 12:0 a.m.10 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to remotely execute arbitrary code using a specially crafted file...

7.8CVSS6.1AI score0.00349EPSS
SaveExploits0References12Affected Software2
OSV
OSV
added 2024/07/22 9:15 p.m.7 views

CVE-2024-6791

A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file. This vulnerability affects VeriStand 2024 Q2 and prior versio...

7.8CVSS6.1AI score0.00458EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/22 8:15 p.m.11 views

CVE-2024-6638

An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation requires an attacker to provide a user with a specially crafted TDMS file. This vulnerability affects LabVIEW 2024 Q1 and prior versions...

5.5CVSS5.8AI score0.00158EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/22 7:55 p.m.54 views

CVE-2024-6638

CVE-2024-6638 affects LabVIEW 2024 Q1 and earlier versions. The issue is an integer overflow in the TDMS file reader caused by improper input validation, which can lead to an infinite loop. Exploitation requires a user to open a specially crafted TDMS file and is a local, user-interaction-based v...

5.5CVSS5.5AI score0.00158EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/22 12:0 a.m.7 views

PT-2024-37767 · National Instruments · Labview

Name of the Vulnerable Software and Affected Versions: LabVIEW versions prior to 2024 Q1 Description: The issue is caused by an integer overflow due to improper input validation when reading TDMS files, potentially leading to an infinite loop. To exploit this, an attacker would need to provide a...

5.5CVSS7.4AI score0.00158EPSS
SaveExploits0References3
Amazon
Amazon
added 2024/07/22 12:0 a.m.30 views

Important: audiofile

Issue Overview: Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted audio file, as demonstrated by...

8.8CVSS8.2AI score0.08802EPSS
SaveExploits4
SUSE CVE
SUSE CVE
added 2024/07/20 3:46 a.m.5 views

SUSE CVE-2020-21710

A divide by zero issue discovered in epsprintpage in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file...

5.5CVSS6.8AI score0.00619EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2024/07/20 2:52 a.m.3 views

SUSE CVE-2024-40724

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product...

7.8CVSS7.9AI score0.00281EPSS
SaveExploits0References10
OSV
OSV
added 2024/07/19 8:15 a.m.1 views

DEBIAN-CVE-2024-40724

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product...

7.8CVSS8.6AI score0.00281EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/19 8:15 a.m.34 views

CVE-2024-40724

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product...

8.4CVSS0.00281EPSS
SaveExploits0References3
Rows per page
Query Builder