PT-2024-39387 · Lenovo · Lenovo Starstudio

Name of the Vulnerable Software and Affected Versions: Lenovo stARstudio affected versions not specified Description: A DLL hijack vulnerability was reported that could allow a local attacker to execute code with elevated privileges. Recommendations: At the moment, there is no information about a...

PT-2024-29358 · Lenovo · Lenovo Lock Screen

Name of the Vulnerable Software and Affected Versions: Lenovo Lock Screen affected versions not specified Description: A DLL hijack vulnerability was reported that could allow a local attacker to execute code with elevated privileges. Recommendations: At the moment, there is no information about ...

PT-2024-29130 · Lenovo · Lenovo Super File

Name of the Vulnerable Software and Affected Versions: Lenovo Super File affected versions not specified Description: A DLL hijack vulnerability was reported that could allow a local attacker to execute code with elevated privileges. Recommendations: At the moment, there is no information about a...

Windows Routing and Remote Access Service Code Execution

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Azure Service Fabric Buffer Overflow

The vulnerability of the Azure Service Fabric distributed system is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Windows Routing and Remote Access Service Code Execution

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Cross-site Scripting (XSS)

Dynamic Dashboard is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper validation of values passed to a paragraph widget, allowing malicious characters to trigger XSS attacks when a user opens a page where the widget is rendered...

D-Link DIR-619L security vulnerabilities

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the parameter curTime in file /goform/formSetDDNS failing to properly validate the length size of the input data, which can be exploited by a...

Layout component Code Execution

The vulnerability of the Layout component in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Rockwell Automation Emulate3D Code Execution

The vulnerability of the Rockwell Automation Emulate3D software for virtual modeling of equipment and manufacturing processes is related to improper external manipulation of file names or DLL files during library loading. Exploiting this vulnerability allows an attacker to execute arbitrary code...

2024-10 Dynamic Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5044273)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

CVE-2024-47194

A vulnerability has been identified in ModelSim All versions V2024.3, Questa All versions V2024.3. vish2.exe in affected applications allows a specific DLL file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate...

KB5046399: Windows Recovery Environment update for Windows Server 2022: October 8, 2024

None None...

KB5046398: Windows Recovery Environment update for Windows 11, version 21H2: October 8, 2024

None None...

PT-2024-6754 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The vulnerability in Windows Routing and Remote Access Service RRAS is related to a buffer overflow in dynamic memory. This issue can be exploited by ...

PT-2024-7115

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.0.3 and earlier Description The issue is caused by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2024-6760 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Server affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary code. This can affect the system...

PT-2024-7120 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.0.3 and earlier Description: The issue is caused by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use...

CVE-2024-47817

Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications a...

CVE-2024-47817 Unvalidated paragraph widget values can be used for Cross-site Scripting in lara-zeus

Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications a...