3362 matches found
CVE-2024-49224
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Mahesh Patel Mitm Bug Tracker allows Reflected XSS.This issue affects Mitm Bug Tracker: from n/a through 1.0...
The vulnerability of Microsoft DeepSpeed’s optimization library, related to the failure to take measures to neutralize special elements used in the operating system’s command set, allows attackers to execute arbitrary code.
The vulnerability of Microsoft DeepSpeed’s optimization library relates to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow attackers to execute arbitrary code...
CVE-2024-43566
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function
A security flaw related to buffer overflow has been identified in GifLib. This flaw allows a nearby attacker to access sensitive information through the DumpSCreen2RGB function in gif2rgb.c...
The library’s vulnerability in converting files to the base64 format for uploading files to the Angular Base64 Upload web application, allowing a hacker to execute arbitrary code.
The vulnerability of the library for converting files to the base64 format, which is used to upload files to the web application’s server, relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute...
OESA-2024-2228 json-lib security update
JSON-lib is a java library for transforming beans, maps, collections, java arrays and XML to JSON and back again to beans and DynaBeans. Security Fixes: util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.CVE-2024-47855...
SUSE CVE-2024-48957
executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...
CVE-2024-45402 Picotls double free
Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. When parsing a spoofed TLS handshake message, picotls specifically, bindings within picotls that call the crypto libraries may attempt to free the same memory twice. This double free occu...
CVE-2024-43604
Outlook for Android Elevation of Privilege Vulnerability...
CVE-2024-43583
Winlogon Elevation of Privilege Vulnerability...
CVE-2024-43576
Microsoft Office Remote Code Execution Vulnerability...
CVE-2024-43581
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability...
CVE-2024-43549
Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...
CVE-2024-43547
Windows Kerberos Information Disclosure Vulnerability...
CVE-2024-43533
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2024-43513
BitLocker Security Feature Bypass Vulnerability...
CVE-2024-43514
Windows Resilient File System ReFS Elevation of Privilege Vulnerability...
CVE-2024-43508
Windows Graphics Component Information Disclosure Vulnerability...