CVE-2024-9427

creationtimestamp| type| source ---|---|--- 2024-12-24 04:15:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzliem3642m 2024-12-24 06:02:15+00:00| seen| https://t.me/cvedetector/13550 2025-06-11 00:34:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18031...

CVE-2024-53240

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues...

PT-2024-9977

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks Freedom, Autodesk Navisworks Simulate, and Autodesk Navisworks Manage affected versions not specified Description: The issue is related to a Memory Corruption vulnerability caused by the improper handling of DWFX files in...

UBUNTU-CVE-2024-54152

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex undisclosed payload, one can get full access...

PT-2024-18617

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2024-34684 · Unknown · Hdc Module

Name of the Vulnerable Software and Affected Versions: HDC module affected versions not specified Description: The issue is related to the lack of verification of input parameters in the HDC module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the...

The vulnerability of the formEasySetPassword function in the D-Link DIR-619L router’s software allows a hacker to execute arbitrary code.

The vulnerability of the formEasySetPassword function in the D-Link DIR-619L router’s software lies in the fact that the execution of the operation is carried out outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the curTime...

PT-2024-31506 · Cavok · Cavok

Name of the Vulnerable Software and Affected Versions: Cavok affected versions not specified Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command, also known as CWE-89. This vulnerability occurs because...

PT-2024-9614 · Gstreamer +7 · Gstreamer +7

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: A vulnerability has been discovered in the qtdemux parse container function within qtdemux.c, related to an out-of-bounds OOB read in memory. The issue arises from the parent function qtdemux...

PT-2024-38725 · Palo Alto Networks · Prisma Access Browser

Name of the Vulnerable Software and Affected Versions: Prisma Access Browser affected versions not specified Description: The issue concerns Prisma Access Browser. No specific details about the nature of the problem or its potential impact are provided in the available information. Recommendation...

PT-2024-31637 · Unknown · Trusted Firmware Module

Name of the Vulnerable Software and Affected Versions: Trusted Firmware Module affected versions not specified Description: A page table protection configuration vulnerability exists in the trusted firmware module. Successful exploitation of this issue may affect service confidentiality. There is...

PT-2024-27982 · Qualcomm · Snapdragon +41

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Memory corruption can occur when processing multiple IOCTL calls concurrently. This issue is related to the processing of concurrent IOCTL calls, which...

CVE-2024-40488

A Cross-Site Request Forgery CSRF vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the administrator into deleting valid member data via a crafted HTML page, as demonstrated by a Delete Member action at the /deletemembers.php...

AMPLE BILLS 1.0 Administrative Page Disclosure

============================================================================================================================================= | Title : AMPLE BILLS v1.0 Administrative Page Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

CVE-2024-5443 Remote Code Execution via Path Traversal in parisneo/lollms

CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the ExtensionBuilder.buildextension function. The vulnerability arises from the /mountextension endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from allowing the exit function to be called without first checking for a valid pointer...

CVE-2024-37057

MLflow vulnerability CVE-2024-37057 affects MLflow platform versions 2.0.0rc0 and later, where deserialization of untrusted data can occur during interaction with a maliciously uploaded TensorFlow model, allowing arbitrary code execution on an end user’s system. The issue is tied to how MLflow lo...

PT-2024-4842 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.5 iOS versions prior to 17.5 macOS versions prior to Sonoma 14.5 Description: The issue relates to inherited permissions errors within the StorageKit component. Exploitation may allow an attacker to elevate...

The vulnerability of Windows operating systems’ message queues allows a perpetrator to execute arbitrary code.

The vulnerability of Windows operating systems’ message queues is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2024-14800 · Honeywell · Experion Server

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A stack overflow issue can occur when a server receives a malformed message based on specified key values, potentially allowing an attacker to perform...