3362 matches found
CVE-2024-24581
in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution through out-of-bounds write...
CVE-2024-25574
SQL injection vulnerability exists in GetDIAEusListParameters...
Exploit for Embedded Malicious Code in Tukaani Xz
Good evening, I would like to inform you about a critical secur...
CVE-2024-30488
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Katie Seaborn Zotpress.This issue affects Zotpress: from n/a through 7.3.7...
USN-6715-1 unixodbc vulnerability
It was discovered that unixODBC incorrectly handled certain bytes. An attacker could use this issue to execute arbitrary code or cause a crash...
CVE-2024-25175
An issue in Kickdler before v1.107.0 allows attackers to provide an XSS payload via a HTTP response splitting attack...
CVE-2024-29059
.NET Framework Information Disclosure Vulnerability...
CVE-2024-28040
SQL injection vulnerability exists in GetDIAEastListParameters...
CVE-2024-23975
SQL injection vulnerability exists in GetDIAEslogListParameters...
abedy-gitlab-client (>=0.0.2.4 <=0.3.0), abilian-devtools (>=0.5.14 <=0.7.3) +1313 more potentially affected by CVE-2024-21503 via black (>=18.3.0a0 <=24.2.0)
black PYPI version =18.3.0a0, =0.0.2.4, =0.5.14, =0.1.0, =0.0.1, =0.1.5, =0.1.0, =0.4.0, =1.0.0, =0.1.2, =0.1.2, =0.1.0, =0.1.2, =1.0.2 - aibs-informatics-test-resources =0.0.4 and more Source cves: CVE-2024-21503 Source advisory: OSV:PYSEC-2024-48...
CVE-2024-27767
CWE-287: Improper Authentication may allow Authentication Bypass...
The vulnerability of the gguf_fread_str function in the GGUF library, which allows a hacker to execute arbitrary code.
The vulnerability of the gguffreadstr function in the GGUF library is related to integer overflow. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
TurboBoost Commands vulnerable to arbitrary method invocation
Impact TurboBoost Commands has existing protections in place to guarantee that only public methods on Command classes can be invoked; however, the existing checks aren't as robust as they should be. It's possible for a sophisticated attacker to invoke more methods than should be permitted dependi...
ROS-2-1440
2.1440 Nettle library vulnerabilityCVE-2021-20305 1. Vulnerability Description: A vulnerability in the Nettle library that involves the use of a failed cryptographic algorithm and allows a remote unauthenticated attacker to execute arbitrary code.Identifier of the Information Security Threats Dat...
ROS-2-1278
2.1278 Nettle library vulnerabilityCVE-2021-20305 1. Vulnerability Description: A Nettle library vulnerability involving the use of a failed cryptographic algorithm and allowing an unauthenticated remote attacker to execute arbitrary code.FSTEC Russia Information Security Threats Data Bank...
ROS-2-1694
2.1694 Nettle library vulnerabilityCVE-2021-20305 1. Vulnerability Description: A vulnerability in the Nettle library that involves the use of a failed cryptographic algorithm and allows a remote unauthenticated attacker to execute arbitrary code.Identifier of the Information Security Threats Dat...
CVE-2024-26173
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2024-21443
Windows Kernel Elevation of Privilege Vulnerability...