CVE-2024-7995 Autodesk VRED Design Privilege Escalation Vulnerability

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution...

CVE-2024-7995 Autodesk VRED Design Privilege Escalation Vulnerability

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution...

CVE-2024-7995

Autodesk VRED Design is affected by CVE-2024-7995, where a maliciously crafted binary file downloaded could exploit an untrusted search path to escalate privileges to NT AUTHORITY/SYSTEM, potentially enabling code execution. The condition is triggered by handling a downloaded binary within the VR...

Exploit for CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Unauth...

Malicious code in semi-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05640460dfefb40e49d1b9fcfa054fabedc4ccdff887981a44f2f1e760b23661 The OpenSSF Package Analysis project identified 'semi-design' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10354 Malicious code in semi-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05640460dfefb40e49d1b9fcfa054fabedc4ccdff887981a44f2f1e760b23661 The OpenSSF Package Analysis project identified 'semi-design' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Autodesk VRED Design 安全漏洞

Autodesk VRED Design is a professional 3D visualization software from Autodesk, Inc. A security vulnerability exists in Autodesk VRED Design version 2025, which stems from the use of an untrusted search path, where a maliciously crafted binary file may lead to privilege escalation during download...

PT-2024-38744 · Autodesk · Vred Design

Name of the Vulnerable Software and Affected Versions: VRED Design affected versions not specified Description: A maliciously crafted binary file, when downloaded, could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design...

CVE-2024-20122

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1572...

CVE-2024-20117

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681...

CVE-2024-20117

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681...

CVE-2024-20124

The vulnerability CVE-2024-20124 affects the vdec component, where an out-of-bounds read due to improper structure design could lead to local information disclosure. Exploitation requirements: SYSTEM privileges are needed, with no user interaction required. Patch ID ALPS09008925 (MSV-1568) is ref...

CVE-2024-20122

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1572...

CVE-2024-43343

Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Order Tracking: from n/a through 3.3.12...

CVE-2024-43343

Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Order Tracking: from n/a through 3.3.12...

CVE-2024-37232

Missing Authorization vulnerability in Hercules Design Hercules Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hercules Core: from n/a through 6.5...

CVE-2024-37232

CVE-2024-37232 is a Missing Authorization vulnerability in Hercules Core (affected: versions n/a through 6.5) that allows exploitation through misconfigured Access Control settings, enabling unauthorized updates to core settings. The issue originates from an authority check flaw that fails to pro...

CVE-2024-43343 WordPress Order Tracking – WordPress Status Tracking Plugin plugin < 3.3.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Order Tracking: from n/a through 3.3.12...

CVE-2024-43343

CVE-2024-43343 affects the WordPress Order Tracking (Order Tracking – WordPress Status Tracking Plugin) up to version 3.3.12, with Missing Authorization due to ACL enforcement gaps enabling unauthorized access to certain functions. Root cause: lack of proper authorization checks in Order Tracking...

PT-2024-30510 · Unknown · Etoile Web Design Order Tracking

Name of the Vulnerable Software and Affected Versions: Etoile Web Design Order Tracking versions n/a through 3.3.12 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a...