2018 matches found
CVE-2024-8389
Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 130...
CVE-2024-8384
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox 130, Firefox ESR 128.2, Firefox ESR 115.15, Thunderbird 128.2, and...
CVE-2024-8381
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the with environment. This vulnerability affects Firefox 130, Firefox ESR 128.2, Firefox ESR 115.15, Thunderbird 128.2, and Thunderbird 115.15...
CVE-2024-8388
Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to fullscreen mode after the fix for CVE-2023-6870 in Firefox 121. This could lead to spoofing the browser UI if the sudden appearance of the prompt distracted the...
CVE-2024-8382
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence would indicate certain browser features had...
CVE-2024-8385
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2...
WordPress Duplicator File Read
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Duplicator File Read Vulnerability', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability in...
CVE-2024-34019
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...
CVE-2024-34019
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...
CVE-2024-34017
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...
CVE-2024-34018
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4569...
CVE-2024-34017
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...
CVE-2024-34018
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4569...
CVE-2024-34018
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4569...
CVE-2024-34018
CVE-2024-34018 affects Acronis Snap Deploy for Windows, prior to build 4569. The root cause is insecure folder permissions that permit disclosure of sensitive information. Impact is described as a sensitive information disclosure with a local attack vector; the vulnerability is tied to the Window...
CVE-2024-34018
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4569...
CVE-2024-34017
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...
CVE-2024-34017
CVE-2024-34017 affects Acronis Snap Deploy on Windows prior to build 4569, caused by a DLL hijacking flaw that enables local privilege escalation. The vulnerability arises in the product’s handling of DLLs, allowing an attacker with local access and low privileges to escalate privileges (as descr...