CVE-2024-54159

A flaw was found in stalld package. The affected versions of stalld allow local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

CVE-2024-51127

A flaw was found in the createTempFile method of hornetq. Affected version of hornetq allows attackers to arbitrarily overwrite files or access sensitive information. Mitigation There is currently no known mitigation for this vulnerability...

CVE-2024-11620 WordPress Rank Math SEO plugin <= 1.0.231 - Arbitrary .htaccess Overwrite to Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Code Injection.This issue affects Rank Math SEO: from n/a through = 1.0.231...

CVE-2024-46939

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

CVE-2024-46939 Game Extension Engine Path Traversal Vulnerability

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

CVE-2024-46939 Game Extension Engine Path Traversal Vulnerability

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

CVE-2024-46939

The CVE-2024-46939 issue affects the vivo Game Extension Engine, versions 1.2.7.0 and earlier. The engine exposes certain components, enabling attackers to craft parameters for path traversal attacks that can overwrite local files. No explicit patch/version fix is documented in the provided sourc...

CVE-2017-15832

Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...

CVE-2017-15832 Buffer overwrite due to improper input validation in WLAN host

Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...

CVE-2017-15832 Buffer overwrite due to improper input validation in WLAN host

Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from improper input validation resulting in a buffer overwrite...

PT-2024-41081 · Spring · Spring Framework

Name of the Vulnerable Software and Affected Versions: Spring Framework affected versions not specified Description: The issue is related to the org.springframework.web.multipart package of the Spring Web module in the Spring Framework, which is associated with incorrect restriction of the path...

CVE-2024-6233

Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Check Point ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged...

CVE-2024-48862

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed the vulnerability in the followin...

WordPress Rank Math SEO plugin <= 1.0.231 - Arbitrary .htaccess Overwrite to Remote Code Execution (RCE) vulnerability

Arbitrary .htaccess Overwrite to Remote Code Execution RCE vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Rank Math SEO versions = 1.0.231...

PT-2024-33250 · Unknown · Qulog Center

Name of the Vulnerable Software and Affected Versions: QuLog Center versions prior to 1.7.0.831 QuLog Center versions prior to 1.8.0.888 Description: A link following vulnerability has been reported to affect QuLog Center, allowing remote attackers to traverse the file system to unintended...

Unspecified vulnerability in Linux kernel (CNVD-2024-46430)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a buffer overwrite problem when using buffers larger than 32. No details of the vulnerability are provided a...

SUSE CVE-2024-50288

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix buffer overwrite when using 32 buffers The maximum number of buffers that can be requested was increased to 64 for the video capture queue. But video capture used a mustblank array that was still sized for 32...