3363 matches found
ROS-20241212-01
Vulnerability of pcre2jitcompile.c function of PCRE2 regular expression library is related to reading beyond data buffer boundaries. Exploitation of the vulnerability allows an attacker acting remotely to gain access to confidential data and also to access the data. remotely to gain access to...
EUVD-2024-3441
python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...
Amazon Linux 2023 : python3.11-pip, python3.11-pip-wheel (ALAS2023-2024-780)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-780 advisory. Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the...
UBUNTU-CVE-2024-55634
A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8...
CVE-2024-44855
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2navfnplanner...
CVE-2017-13323
In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation...
SUSE CVE-2024-10224
Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by opening a "pesky pipe" such as passing "commands|" as a filename or by passing arbitrary strings to eval...
CVE-2024-49060
Azure Stack HCI Elevation of Privilege Vulnerability...
CVE-2024-8049 Telerik Document Processing Improper Handling of Memory Resources
In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 2024.4.1106, importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable...
CVE-2024-49043
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability...
CVE-2024-49039
Windows Task Scheduler Elevation of Privilege Vulnerability...
CVE-2024-49028
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2024-49018
SQL Server Native Client Remote Code Execution Vulnerability...
CVE-2024-49009
SQL Server Native Client Remote Code Execution Vulnerability...
CVE-2024-49004
SQL Server Native Client Remote Code Execution Vulnerability...
CVE-2024-48996
SQL Server Native Client Remote Code Execution Vulnerability...
CVE-2024-48993
SQL Server Native Client Remote Code Execution Vulnerability...
CVE-2024-43636
Win32k Elevation of Privilege Vulnerability...