3369 matches found
CVE-2024-49107
WmsRepair Service Elevation of Privilege Vulnerability...
CVE-2024-49101
Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...
CVE-2024-49079
Input Method Editor IME Remote Code Execution Vulnerability...
CVE-2024-49068
Microsoft SharePoint Elevation of Privilege Vulnerability...
CVE-2024-43594
Microsoft System Center Elevation of Privilege Vulnerability...
ROS-20241212-01
Vulnerability of pcre2jitcompile.c function of PCRE2 regular expression library is related to reading beyond data buffer boundaries. Exploitation of the vulnerability allows an attacker acting remotely to gain access to confidential data and also to access the data. remotely to gain access to...
EUVD-2024-3441
python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...
Amazon Linux 2023 : python3.11-pip, python3.11-pip-wheel (ALAS2023-2024-780)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-780 advisory. Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the...
UBUNTU-CVE-2024-55634
A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8...
CVE-2024-44855
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2navfnplanner...
CVE-2017-13323
In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation...
SUSE CVE-2024-10224
Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by opening a "pesky pipe" such as passing "commands|" as a filename or by passing arbitrary strings to eval...
CVE-2024-49060
Azure Stack HCI Elevation of Privilege Vulnerability...
CVE-2024-8049 Telerik Document Processing Improper Handling of Memory Resources
In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 2024.4.1106, importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable...
CVE-2024-49043
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability...
CVE-2024-49039
Windows Task Scheduler Elevation of Privilege Vulnerability...
CVE-2024-49028
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2024-49018
SQL Server Native Client Remote Code Execution Vulnerability...