The vulnerability of Adobe InDesign’s automation tool for computer design, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-7882: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection. This issue affects e-Commerce: before 22.11.2024...

CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

PT-2024-9981 · Autodesk · Autodesk Navisworks

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks affected versions not specified Description: The issue is related to an Out-of-Bounds Write vulnerability that can occur when a maliciously crafted DWFX file is parsed through Autodesk Navisworks. This vulnerability can be...

CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

CVE-2024-30896

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated and...

CVE-2024-30896

In InfluxDB OSS versions 2.x through 2.7.11 , a business logic flaw allows users with a valid allAccess token to escalate privileges to the operator level. This occurs because allAccess tokens can list all authorizations within the same organization without type restrictions, specifically via the...

2024 CWE Top 25 Most Dangerous Software Weaknesses

The Cybersecurity and Infrastructure Security Agency CISA, in collaboration with the Homeland Security Systems Engineering and Development Institute HSSEDI, operated by MITRE, has released the 2024 CWE Top 25 Most Dangerous Software Weaknesseslink is external. This annual list identifies the most...

SUSE CVE-2024-53048

In the Linux kernel, the following vulnerability has been resolved: ice: fix crash on probe for DPLL enabled E810 LOM The E810 Lan On Motherboard LOM design is vendor specific. Intel provides the reference design, but it is up to vendor on the final product design. For some cases, like Linux DPLL...

UBUNTU-CVE-2024-53048

In the Linux kernel, the following vulnerability has been resolved: ice: fix crash on probe for DPLL enabled E810 LOM The E810 Lan On Motherboard LOM design is vendor specific. Intel provides the reference design, but it is up to vendor on the final product design. For some cases, like Linux DPLL...

CVE-2024-53048 ice: fix crash on probe for DPLL enabled E810 LOM

In the Linux kernel, the following vulnerability has been resolved: ice: fix crash on probe for DPLL enabled E810 LOM The E810 Lan On Motherboard LOM design is vendor specific. Intel provides the reference design, but it is up to vendor on the final product design. For some cases, like Linux DPLL...

CVE-2024-49689

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Results Light: from n/a through = 0.5...

CVE-2024-49689

CVE-2024-49689 is a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin HD Quiz – Save Results Light (versions ≤ 0.5). The issue arises from incorrectly configured access control levels, enabling unauthorized access due to a broken authorization boundary. CVSS v3.1...

CVE-2024-49689 WordPress HD Quiz – Save Results Light plugin <= 0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Results Light: from n/a through = 0.5...

PT-2024-33641 · Harmonic Design · Harmonic Design Hd Quiz – Save Results Light

Name of the Vulnerable Software and Affected Versions: Harmonic Design HD Quiz – Save Results Light versions 0.5 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations:...

CVE-2024-49689: Missing Authorization

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Results Light: from n/a through = 0.5...

CVE-2024-52411

CVE-2024-52411 describes a deserialization of untrusted data vulnerability in Flowcraft UX Design Studio Advanced Personalization, enabling PHP object injection. Affected: Flowcraft Advanced Personalization component, versions up to 1.1.2 (n/a through 1.1.2). CVSS 3.1 base 9.8 (Network attack vec...

CVE-2024-52411 WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2...

CVE-2024-52411 WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in flowcraft Advanced Personalization personalization-by-flowcraft allows Object Injection.This issue affects Advanced Personalization: from n/a through = 1.1.2...

PT-2024-35251 · Unknown · Flowcraft Ux Design Studio

Name of the Vulnerable Software and Affected Versions: Flowcraft UX Design Studio Advanced Personalization versions from n/a through 1.1.2 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This problem affects the Advanced Personalization...