Unspecified Vulnerability in Google Chrome (CNVD-2024-35099)

Google Chrome is a web browser from Google, an American company. Google Chrome has a security vulnerability that stems from an insufficient data validation issue found in the Permission Prompts module. No details of the vulnerability are provided at this time...

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a buffer overflow vulnerability that originates from /lib/core/abts.c failing to properly validate the length size of input data, which could be exploited by an attacker ...

CVE-2024-6743 AguardNet Space Management System - SQL injection

AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

PT-2024-25283 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 6.3 through 7.2.1 FortiWeb version 7.0 Description: An improper certificate validation issue may allow a remote and unauthenticated attacker in a Man-in-the-Middle position to decipher and/or tamper with the communication...

Farm Management System SQL Injection Vulnerability (CNVD-2024-33389)

Farm Management System is a farm management system. A SQL injection vulnerability exists in Farm Management System version 1.0, which stems from a lack of validation of externally-entered SQL statements in the parameter pigno/breed/reason in the file /quarantine.php?id=3. An attacker could use th...

CVE-2024-34593

Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability...

PT-2024-18564 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds write in the gnss service due to improper input validation. This could lead to local escalation of privilege, with System execution...

CVE-2024-3111

The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored Cross-Site Scripting issues...

[SECURITY] [DSA 5717-1] php8.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5717-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 20, 2024 https://www.debian.org/security/faq -...

CVE-2024-6144

CVE-2024-6144 affects Actiontec WCB6200Q routers. The issue is a stack-based buffer overflow in the HTTP server caused by improper validation of user-supplied data length, enabling network-adjacent attackers to execute arbitrary code with the HTTP server context. Impact is high (C, I, A) with no ...

Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgat...

PaperCut MF EmailRenderer Server-Side Template Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut MF. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the EmailRenderer class. The iss...

CVE-2024-3032 Themify Builder < 7.5.8 - Open Redirect

Themify Builder WordPress plugin before 7.5.8 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...

CVE-2024-2762

The CVE-2024-2762 issue affects FooGallery (WordPress) and FooGallery Premium before 2.4.15, where gallery settings are not properly validated/escaped before output. This can enable Stored XSS by users with as little as Author privileges, potentially impacting admin users. Severity is reported as...

Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Autodesk AutoCAD SLDASM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2024-27107 · Totolink · Totolink Ac1200 Wireless Dual Band Gigabit Router

Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware version A3100R V4.1.2cu.5247 B20211129 Description: The issue arises from the lack of input validation in the setNoticeCfg function, specifically with the NoticeUrl variable. This...

CVE-2024-30373 Kofax Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Kofax Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-27371

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsinanfollowupgetnlparams, there is no input validation check on halreq-servicespecificinfolen coming from userspace, which can lead to a heap overwrite...