CVE-2024-11262

A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as critical. Affected by this vulnerability is the function main of the component View All Student Marks. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack...

CVE-2024-10372

A vulnerability classified as problematic was found in chidiwilliams buzz 1.1.0. This vulnerability affects the function downloadmodel of the file buzz/modelloader.py. The manipulation leads to insecure temporary file. It is possible to launch the attack on the local host. The complexity of an...

CVE-2024-10372

CVE-2024-10372 — chidiwilliams buzz 1.1.0 is affected through the function download_model in buzz/model_loader.py, where misuse creates an insecure temporary file. Attacks can be launched locally with high attack complexity and minimal privileges, and the vulnerability has been publicly disclosed...

CVE-2024-6061

A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this vulnerability is the function isoffinprocess of the file src/filters/isoffinread.c of the component MP4Box. The manipulation leads to infinite loop. It is possible to launch the...

CVE-2024-1661

A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity ...

Hardcoded credentials

A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity ...

Security feature bypass

A vulnerability classified as problematic has been found in Armcode AlienIP 2.41. Affected is an unknown function of the component Locate Host Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public...

CVE-2024-1184

A vulnerability was found in Nsasoft Network Sleuth 3.0.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploi...

CVE-2024-0774

CVE-2024-0774 affects Any-Capture Any Sound Recorder 2.93, via the Registration Handler component. The vulnerability arises from manipulating the User Name/Key Code argument, leading to memory corruption. Exploitation is described as local (attack on the local host) and public exploits are noted....

CVE-2023-4991

A vulnerability was found in NextBX QWAlerter 4.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file QWAlerter.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. The identifier of this...

Design/Logic Flaw

A vulnerability was found in NextBX QWAlerter 4.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file QWAlerter.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. The identifier of this...

CVE-2023-4991

CVE-2023-4991 concerns NextBX QWAlerter 4.50. Multiple connected sources confirm a vulnerability in QWAlerter.exe causing an unquoted search path, enabling local-host execution. The issue is described as critical across sources (CVSS-like metrics in initial documents show local attack vector, low...

PT-2023-31408 · Nextbx · Nextbx Qwalerter

Name of the Vulnerable Software and Affected Versions: NextBX QWAlerter version 4.50 Description: A critical issue was found in the software, affecting some unknown functionality of the file QWAlerter.exe. The manipulation leads to an unquoted search path, allowing an attack to be launched on the...

CVE-2023-3099

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function deletefile in the library dbus.SystemBus of the component Arbitrary File Handler. The manipulation leads to improper access controls. It is possible to launch...

Improper access control

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function deletefile in the library dbus.SystemBus of the component Arbitrary File Handler. The manipulation leads to improper access controls. It is possible to launch...

Null pointer dereference

A vulnerability, which was classified as problematic, was found in eScan Antivirus 22.0.1400.2443. Affected is the function 0x22E008u in the library PROCOBSRVESX.SYS of the component IoControlCode Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on...

CVE-2023-2870 EnTech Monitor Asset Manager IoControlCode 0x80002014 denial of service

A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vulnerability is the function 0x80002014 of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host...

CVE-2023-2863

The CVE-2023-2863 entry concerns Simple Design Daily Journal 1.012.GP.B (Android). Affected is an unknown SQLite Database functionality that allows cleartext storage to a file or on disk. The attack can be launched on the local host; the exploit has been publicly disclosed. Connected sources corr...

CVE-2023-2790

The CVE-2023-2790 entry describes a local vulnerability in TOTOLINK N200RE 9.3.5u.6255_B20211224: the Telnet Service’s file /squashfs-root/etc_ro/custom.conf contains an unknown function with improper protection, allowing manipulation that exposes passwords in the configuration file. The issue is...

CVE-2023-2417

A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this issue is some unknown functionality of the file C:\Program Files x86\HostMonitor\RMA-Win\rmaactive.exe. The manipulation leads to unquoted search path. It is possible to launch t...