2290 matches found
PT-2024-17659 · WordPress · Store Locator For Wordpress With Google Maps – Lotsoflocales
Name of the Vulnerable Software and Affected Versions: The Store Locator for WordPress with Google Maps – LotsOfLocales plugin for WordPress version 3.98.9 Description: The issue is a Local File Inclusion vulnerability that allows unauthenticated attackers to include and execute arbitrary files o...
postgresql:15 security update
An update is available for pgaudit, module.pgaudit, module.postgres-decoderbufs, postgres-decoderbufs, pgrepack, module.pgrepack. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
perl-App-cpanminus:1.7044 security update
An update is available for module.perl-CPAN-DistnameInfo, module.perl-Parse-PMFile, perl-String-ShellQuote, perl-App-cpanminus, perl-File-pushd, module.perl-File-pushd, module.perl-String-ShellQuote, perl-Parse-PMFile, module.perl-App-cpanminus, perl-CPAN-DistnameInfo, module.perl-CPAN-Meta-Check...
PT-2024-17752 · Arista · Arista Ng Firewall
Name of the Vulnerable Software and Affected Versions: Arista NG Firewall affected versions not specified Description: This issue allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to...
gstreamer1-plugins-good: uninitialized stack memory in Matroska/WebM demuxer
A flaw was found in the Matroska/WebM demuxer in the GStreamer library. Processing a specially crafted input file can cause the usage of uninitialized stack memory, allowing calls to uninitialized function pointers, potentially resulting in code execution or an application crash...
BIT-NODE-MIN-2024-36138
Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via childprocess.spawn / childprocess.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option i...
CVE-2024-49127
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
Rockwell Automation Arena < 16.20.06 Multiple Vulnerabilities
The version of Rockwell Automation Arena installed on the remote Windows host is prior to 16.20.06. It is, therefore, affected by a number of different vulnerabilities - A âuse after freeâ code execution vulnerability exists in the affected products that could allow a threat actor to craft a...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2941)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3991-1] upx-ucl security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3991-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler December 11, 2024 https://wiki.debian.org/LTS -...
CVE-2024-55884
In the Mullvad VPN client 2024.6 Desktop, 2024.8 iOS, and 2024.8-beta1 Android, the exception-handling alternate stack can be exhausted, leading to heap-based out-of-bounds writes in enable in exceptionlogging/unix.rs, aka MLLVD-CR-24-01. NOTE: achieving code execution is considered non-trivial...
CVE-2024-53866
The CVE-2024-53866 entry concerns pnpm before 9.15.0, where overrides from one workspace can leak into npm metadata stored in global cache, and global-cache data can affect other workspaces. This undermines global state integrity and can enable arbitrary code execution on installs, even when igno...
CVE-2024-49849
A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 9, SIMATIC STEP 7 Safety V18 All versions, SIMATIC STEP 7 Safety V19 All versions V19 Update 4,...
CVE-2024-54094
A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 5. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...
CVE-2024-54094
Solid Edge SE2024 (all versions earlier than V224.0 Update 5) is affected by a heap-based buffer overflow during parsing of specially crafted PAR files. The flaw can allow code execution in the context of the current process. Affected product: Siemens Solid Edge SE2024; vulnerable component: PAR ...
CVE-2024-54093
CVE-2024-54093 affects Siemens Solid Edge SE2024. All versions prior to V224.0 Update 5 expose a heap-based buffer overflow while parsing specially crafted ASM (and PAR per vendor advisory) files, enabling potential code execution in the current process. Public sources consistently describe the i...
CVE-2024-54091
A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 12, Solid Edge SE2025 All versions V225.0 Update 3. The affected application contains an out of bounds write past the end of an allocated buffer while parsing XT data or a specially crafted file in XT format. This...
CVE-2024-54091
CVE-2024-54091 affects Siemens Parasolid (used by Solid Edge SE2024 <V224.0 Update 12 and SE2025
APSB24-99 : Security update available for Adobe Connect
Adobe has released a security update for Adobe Connect. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, privilege escalation and security feature bypass...
PT-2024-9629 · Siemens · Solid Edge
Name of the Vulnerable Software and Affected Versions: Solid Edge SE2024 versions prior to V224.0 Update 10 Description: The issue is related to an integer underflow vulnerability when processing PAR files. This could allow an attacker to execute code in the context of the current process. The...