Google Chrome Code Execution Vulnerability (CNVD-2024-33612)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that originates from memory reuse after release in Dawn. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Google Chrome Code Execution Vulnerability (CNVD-2024-34498)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that originates from memory reuse after release in Tabs, which can be exploited by an attacker to execute arbitrary code on the system...

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

NETGEAR RAX30 Command Injection Vulnerability (CNVD-2024-33905)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Out-of-Bounds Write Vulnerability (CNVD-2024-33589)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code...

Triangle MicroWorks SCADA Data Gateway Arbitrary File Write Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. Triangle MicroWorks SCADA Data Gateway suffers from an arbitrary file write vulnerability that can be exploited by an attacker to write arbitrary files and execute arbitrary code...

CVE-2024-23470

CVE-2024-23470 affects SolarWinds Access Rights Manager (ARM). A pre-authentication remote code execution vulnerability is described as an exposed dangerous method in the UserScriptHumster component, allowing an unauthenticated user to run commands/executables on the server. Related Nessus data c...

CVE-2024-23470 SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability

The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables...

Apache Airflow code execution vulnerability (CNVD-2024-33592)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow suffers from a code execution vulnerability that can be exploited by...

PT-2024-27510 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM 2024 flat Description: The issue is related to an unspecified SQL Injection flaw in the core server, allowing an authenticated attacker within the same network to execute arbitrary code. Recommendations: For Ivanti EPM 2024 flat, a...

Kofax Power PDF Out-of-Bounds Read Vulnerability (CNVD-2024-33725)

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute arbitrary code...

Kofax Power PDF Out-of-Bounds Write Vulnerability (CNVD-2024-33727)

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code...

Adobe Premiere Pro Untrusted Search Path Vulnerability

Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. An untrusted search path vulnerability exists in Adobe Premiere Pro, which can be exploited by an attacker to execute code in the context of the current user...

D-Link DAP-2622 Buffer Overflow Vulnerability (CNVD-2024-32560)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. The D-Link DAP-2622 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code in the root context...

Kofax Power PDF Buffer Overflow Vulnerability (CNVD-2024-33729)

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

Code execution vulnerability in multiple Mozilla products (CNVD-2024-34588)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in multiple Mozilla products, whic...

NETGEAR ProSAFE Arbitrary File Upload Vulnerability

NETGEAR ProSAFE is a network management system from NETGEAR. An arbitrary file upload vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to execute arbitrary code...

NETGEAR Routers Code Execution Vulnerability

NETGEAR Routers is a series of routers from NETGEAR. A code execution vulnerability exists in NETGEAR Routers that can be exploited by an attacker to execute arbitrary code...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to a code execution vulnerability in Node.js IP package (CVE-2023-42282)

Summary Potential code execution vulnerability in Node.js IP package CVE-2023-42282 has been identified that could affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-42282...

Siemens Teamcenter Visualization and JT2Go Out-of-Bounds Read Vulnerability (CNVD-2024-31244)

Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios.Siemens JT2Go is a JT file viewer. An out-of-bounds read vulnerability exists in Siemens Teamcenter Visualization and JT2Go, which can be exploited by an attacker to execute code i...