8918 matches found
fuse: Initialize beyond-EOF page contents before setting uptodate
...
PT-2024-14501 · Unknown · Freescout End-User Portal
Name of the Vulnerable Software and Affected Versions: FreeScout End-User Portal module versions prior to 1.0.65 Description: The issue allows an attacker to authenticate as an arbitrary user because a session token can be sent to the "/auth" endpoint. Recommendations: For versions prior to 1.0.6...
PT-2024-39821 · Tungsten Automation · Tungsten Automation Power Pdf
Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious...
PT-2024-39801 · Tungsten Automation · Tungsten Automation Power Pdf
Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or...
PT-2024-39826 · Tungsten Automation · Tungsten Automation Power Pdf
Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploi...
PT-2024-39804 · Tungsten Automation · Tungsten Automation Power Pdf
Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or...
CVE-2024-47965
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process...
CVE-2024-47963
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process...
CVE-2024-47963 Out-of-bounds Write vulnerability in Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerability to execute code in the context of the current process...
CVE-2024-47963
Delta Electronics CNCSoft-G2 contains a DPAX file parsing flaw that can cause an out-of-bounds write, enabling remote code execution. The vulnerability requires user interaction (visiting a malicious page or opening a malicious file) and affects DPAX parsing logic; exploitation leads to code exec...
apache-avro: Schema parsing may trigger Remote Code Execution (RCE)
A vulnerability was found in Apache Avro. The project is affected and at risk if it accepts an org.apache.Avro/avroAvro schema for parsing provided by an end user. This flaw allows an attacker to trigger remote code execution by using the special "java-class" attribute...
October 8, 2024—KB5044285 (OS Builds 22621.4317 and 22631.4317)
None None...
October 8, 2024—KB5044280 (OS Build 22000.3260)
None None...
October 8, 2024—KB5044321 (Security-only update)
None None...
October 8, 2024—KB5044342 (Monthly Rollup)
None None...
CVE-2024-38229
.NET and Visual Studio Remote Code Execution Vulnerability...
KB5044272: Cumulative security update for Internet Explorer: October 8, 2024
None None...
CVE-2024-43484
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...