231557 matches found
CVE-2024-5509
CVE-2024-5509 concerns Luxion KeyShot: a flaw in BIP file parsing enables an attacker to load a library from an unsecured location, leading to remote code execution . The vulnerability arises from an uncontrolled search path element, allowing code execution in the context of the current process. ...
CVE-2024-5507
CVE-2024-5507 (Luxion KeyShot Viewer) : A stack-based buffer overflow in the parsing of KSP files can enable remote code execution in affected KeyShot Viewer installations. The flaw arises from insufficient validation of the length of user-supplied data prior to copying it to a stack-based buffer...
CVE-2024-5268
CVE-2024-5268 – Sonos Era 100 SMB2 Handling : The vulnerability affects Sonos Era 100 devices via the SMB2 message handling path, where insufficient validation of user data can cause a read past the end of an allocated buffer, enabling information disclosure for network-adjacent attackers. Authen...
CVE-2024-5267
CVE-2024-5267 describes a vulnerability in Sonos Era 100 where the SMB2 message handling allows an out-of-bounds write that can execute code with root privileges. The flaw comes from inadequate validation of user-supplied data, enabling a network-adjacent attacker (no authentication required) to ...
CVE-2024-5505
CVE-2024-5505 concerns the NETGEAR ProSAFE Network Management System, where the UpLoadServlet contains a directory traversal flaw that lacks proper validation of a user-supplied path in file operations. This leads to remote code execution with SYSTEM privileges. Exploitation is described as requi...
CVE-2024-30375
Summary (CVE-2024-30375): Luxion KeyShot Viewer is affected by a use-after-free in KSP file parsing that can lead to remote code execution. The vulnerability stems from not validating the existence of an object before performing operations, allowing an attacker to execute code in the context of t...
CVE-2024-30374
The CVE-2024-30374 entry concerns Luxion KeyShot Viewer. Affected component: KSP file parsing in the viewer, with an out-of-bounds write due to inadequate validation of user-supplied data. Impact: remote code execution by an attacker who entices a target to visit a malicious page or open a malici...
CVE-2024-3033
The CVE-2024-3033 issue affects mintplex-labs/anything-llm, specifically the "/api/v/" endpoint and its sub-routes. It is described as an improper authorization vulnerability that allows unauthenticated users to perform destructive actions on the VectorDB, including resetting the database and del...
CVE-2024-36745
CVE-2024-36745 affects OneFlow-Inc Oneflow v0.9.1. The issue allows an attacker to cause a Denial of Service by inputting a negative value into the oneflow.index_select parameter. CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, no privileges required, user interaction NONE. Multiple source...
CVE-2024-35178
CVE-2024-35178 affects Jupyter Server on Windows, where unauthenticated attackers can leak the NTLMv2 password hash of the Windows user running the server. This can enable cracking the hash to gain access to the host or other networked systems, or allow NTLM relay-style access to additional machi...
CVE-2024-36106
Affected product: Argo CD (GitOps for Kubernetes). Vulnerability: Authenticated users may enumerate clusters by name via error messages and, if cluster names are known, enumerate project-scoped cluster names as well. Root cause / status: Information disclosure through verbose error messages. Impa...
CVE-2024-36779
CVE-2024-36779 affects Sourcecodester Stock Management System v1.0 . The vulnerability is an SQL Injection via the file editCategories.php , caused by improper input handling. The CVSS 3.1 metrics indicate a CRITICAL impact with C/H/I/A = High and a network attack vector without user interaction....
CVE-2024-5658
The CVE-2024-5658 entry affects the CraftCMS plugin “Two-Factor Authentication” (versions up to 3.3.3). The root cause is that TOTP tokens can be reused within their validity period, which is described as an improper authentication vulnerability that may allow bypassing 2FA. Practical impact is l...
CVE-2024-5657
CVE-2024-5657 affects CraftCMS plugin Two-Factor Authentication (versions 3.3.1–3.3.3). After submitting a valid TOTP, the plugin discloses the password hash of the currently authenticated user in server responses. Root cause: improper handling/exposure of password hashes within normal responses....
CVE-2024-5329
CVE-2024-5329 affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress. The vulnerability is a blind SQL Injection in the data[addonID] parameter present in all versions up to 1.5.109, caused by insufficient escaping and lack of proper preparation in the SQL query....
CVE-2024-28995
CVE-2024-28995 is a directory traversal vulnerability in SolarWinds Serv-U that allows unauthenticated attackers to read sensitive host files. The flaw affects Serv-U and can be triggered via crafted directory/file paths (e.g., using InternalDir/InternalFile payloads) to access local logs and sys...
CVE-2024-5221
The CVE-2024-5221 entry concerns the Qi Blocks WordPress plugin. Public records here show a Stored XSS vulnerability in the plugin’s file uploader affecting all versions up to and including 1.2.9, caused by insufficient input sanitization and output escaping. Exploitation requires authentication ...
CVE-2024-36394
SysAid CVE-2024-36394 is an OS command injection vulnerability caused by improper neutralization of special elements in OS commands. The public details indicate the flaw affects SysAid’s on-premise deployments and can lead to arbitrary command execution within the application’s context. A remedia...
CVE-2024-36393
CVE-2024-36393 concerns SysAid with a CWE-89 SQL injection flaw. Public records in NVD/NVD-derived sources describe an SQL-injection vulnerability arising from improper neutralization of special SQL elements in SysAid software. The connected EUVD/NVD/CVE/CVE records corroborate the vulnerability ...