CVE-2024-30963

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script...

CVE-2024-30961

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2btnavigator...

CVE-2024-46909 WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage this vulnerability to execute code in the context of the service account...

CVE-2024-53673

A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code...

CVE-2024-52899

IBM Data Virtualization Manager for z/OS 1.1 and 1.2 could allow an authenticated user to inject malicious JDBC URL parameters and execute code on the server...

Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway...

CVE-2024-9244

Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the...

CVE-2024-9258

CVE-2024-9258 affects IrfanView via SID file parsing, where an uninitialized pointer is accessed, enabling remote code execution. The flaw requires user interaction (visiting a malicious page or opening a malicious file) and could execute code in the context of the current process. Root cause is ...

CVE-2024-6260

Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Malwarebytes Antimalware. An attacker must first obtain the ability to execute low-privileged code on the target system i...

AVG AntiVirus Free Post-link Vulnerability

AVG AntiVirus Free is a free antivirus program from AVG. AVG AntiVirus Free suffers from a back-link vulnerability that stems from a local elevation of privilege issue that could allow an attacker to delete files, which in turn could elevate privileges and execute arbitrary code in a SYSTEM...

Panda Security Dome code-related vulnerabilities

Panda Security Dome is an antivirus product for ransomware and spyware from Spanish company Panda Security. A code issue vulnerability exists in Panda Security Dome, which arises from an improper restriction of the DLL search path by the VPN process, which could lead to a local attacker loading a...

Panda Security Dome backend link vulnerability

Panda Security Dome is an antivirus product for ransomware and spyware from Spanish company Panda Security. Panda Security Dome suffers from a back-linking vulnerability that originates from the link-following mechanism in the PSANHost executable, which could lead to a local attacker deleting an...

Panda Security Dome security vulnerabilities

Panda Security Dome is an antivirus product for ransomware and spyware from the Spanish company Panda Security. A security vulnerability exists in Panda Security Dome that stems from a lack of proper permission settings for folders created by the Hydra Sdk Windows service, which could allow a loc...

AVG AntiVirus Free Post-link Vulnerability

AVG AntiVirus Free is a free antivirus program from AVG. AVG AntiVirus Free suffers from a back-link vulnerability that stems from a local elevation of privilege issue that could allow an attacker to delete files, which in turn could elevate privileges and execute arbitrary code in a SYSTEM...

G DATA Software Total Security – Backlink Vulnerability

G Data G DATA Software Total Security is a suite of antivirus software from the German company G Data. The software is anti-phishing, anti-virus and anti-spam. G DATA Software Total Security suffers from a backlink vulnerability that stems from improper handling of symbolic links, which could all...

CVE-2024-10913

The Clone plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.6 via deserialization of untrusted input in the 'recursiveunserializedreplace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain i...

CVE-2024-11495

CVE-2024-11495 describes a buffer overflow in OllyDbg 1.10 caused by lack of proper bounds checking, enabling a local attacker to execute arbitrary code. Multiple sources (NVD, CVE record) confirm a local-exploit scenario with high impact, consistent with a serverless/hosted debugger context. The...

AcTranslators.exe AutoCAD RCE

The vulnerability of the AcTranslators.exe executable file used in AutoCAD modeling, design, and drawing software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to write confidential data or execute arbitrary code withi...

CVE-2024-10397 Preallocated buffer overflows in XDR responses

A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code...

PT-2024-37362 · Rockwell Automation · Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Input Analyzer affected versions not specified Description: A memory corruption issue exists when parsing DFT files, allowing local threat actors to disclose information and execute arbitrary code by opening a...