The vulnerability of the exmode mode in the Vim text editor allows a hacker to trigger a service failure.

The vulnerability of the exmode mode in the Vim text editor is related to the assignment of NULL pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2024-21151)

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to elevate privileges...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2024-21146)

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. Microsoft Windows Kernel suffers from an elevation of privilege vulnerability due to a flaw in a kernel component. An attacker can exploit the vulnerability to gain SYSTEM privileges...

PT-2024-2476 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle version 3.10.9 Description: A Cross-Site Scripting XSS issue exists due to inadequate protection of the webpage structure when handling the lang parameter in the "/?lang=" URL parameter. This could allow a remote attacker to read,...

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

Adobe InDesign Out-of-Bounds Read Vulnerability (CNVD-2024-21167)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Adobe InDesign Input Validation Error Vulnerability

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

CVE-2024-31082

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

IBM Cognos Analytics Web UI Cross-Site Scripting Vulnerability (CNVD-2024-13549)

IBM Cognos Analytics is a suite of business intelligence software from International Business Machines IBM. A cross-site scripting vulnerability exists in the IBM Cognos Analytics Web UI, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to obtain...

Multiple Mozilla Product Spoofing Vulnerabilities (CNVD-2024-25533)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A spoofing vulnerability exists in several Mozilla products, which is...

Google Chrome Security Bypass Vulnerability (CNVD-2024-16936)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome that stems from an improper implementation of the Content Security Policy module. An attacker can exploit this vulnerability to bypass security restrictions...

CVE-2024-0440

Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files...

TOTOLINK X5000R Denial of Service Vulnerability

TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Linux kernel null pointer dereference vulnerability (CNVD-2024-45902)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

Linux kernel out-of-bounds write vulnerability (CNVD-2024-45901)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause a kernel error...

Dell Unity SQL Injection Vulnerability

Dell Unity is a set of virtual Unity storage environments from Dell USA. A SQL injection vulnerability exists in Dell Unity prior to version 5.4, which stems from the inclusion of an operating system command injection vulnerability in its svccava utility. An attacker could exploit this...

CVE-2024-24018

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL injection via /system/dataPerm/list...

Discourse Information Disclosure Vulnerability (CNVD-2024-09870)

Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. An information disclosure vulnerability exists in Discourse discourse-group-membership-ip-block, which originates from sending all group customization fields to the...

CVE-2024-23874 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/companymodify.php, in the address1 parameter. Exploitation of this vulnerability...

Google Chrome Out-of-Bounds Write Vulnerability (CNVD-2024-13760)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code on the system...