3363 matches found
CVE-2024-47518
Specially constructed queries targeting ETM could discover active remote access sessions...
Security Bulletin: Vulnerability in XStream library affects App Connect Professional
Summary There is vulnerability in the XStream library used by App Connect Professional. App Connect Professional has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-47072 DESCRIPTION: XStream is vulnerable to a denial of service, caused by a stack-based buffer overflow in...
ROS-20250110-08
A vulnerability in the qrreadermatchcenters function of the ZBar barcode reading library is related to writing outside the buffer boundaries. Exploitation of the vulnerability could allow a remote attacker to gain access to confidential data, compromise its integrity, and compromise its integrity...
CVE-2024-10106
A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's buffer...
CVE-2024-56137
CVE-2024-56137 affects MaxKB (open source knowledge-base Q&A with LLM and RAG). Prior to version 1.9.0, a remote command execution vulnerability exists in the function library module, allowing privileged users to execute OS commands within custom scripts. The issue has been fixed in v1.9.0. Curre...
The vulnerability of the installer of the GFI Archiver software for corporate email and document archiving allows a hacker to execute arbitrary code and gain unauthorized access to protected information.
The vulnerability of the installer of the GFI Archiver software for corporate email and documents is related to the use of an outdated library, Telerik.Web.UI.DLL. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain unauthorized access to protected...
CVE-2021-37000
Some Huawei wearables have a permission management vulnerability...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection due to an improper parsing of the TypeOne FontBBox. This is due to improper sanitization of the bbox values, which could lead to inconsistencies in font metrics or unexpected behavior. Remediation Upgrade...
TCPDF 安全漏洞
TCPDF is an open source library from Tecnick. It is used to generate PDF documents and barcodes. TCPDF version before 6.8.0 has a security vulnerability , the vulnerability stems from the Error function lacks htmlspecialchars call for error messages...
CVE-2024-47157
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...
Amazon Linux 2 : python38-pip (ALASPYTHON3.8-2024-017)
The version of python38-pip installed on the remote host is prior to 21.0.1-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2PYTHON3.8-2024-017 advisory. Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is...
CVE-2024-11614
An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using...
CVE-2024-49122
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...
CVE-2024-49111
Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...
CVE-2024-49105
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2024-49107
WmsRepair Service Elevation of Privilege Vulnerability...
CVE-2024-49101
Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...
CVE-2024-49079
Input Method Editor IME Remote Code Execution Vulnerability...