16384 matches found
CHANGING Mobile One Time Password Code Issue Vulnerability
CHANGING Mobile One Time Password is a password management application from the Chinese company CHANGING Mobile. It is used to set one-time passwords for authentication or transactions. A code issue vulnerability exists in CHANGING Mobile One Time Password, which stems from the upload function on...
CVE-2024-39840
Versions of Factorio prior to 1.1.101 are vulnerable to an arbitrary code execution flaw. A crafted server can execute code on clients by providing a custom map that leverages specific Lua base module functions to execute bytecode and generate fake objects . To remediate this, users should update...
Security Bulletin: Vulnerability in tqdm affects IBM Process Mining CVE-2024-34062
Summary There is a vulnerability in tqdm that could allow an local authenticated attacker to execute arbitrary code on the system. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2024-34062...
CVE-2024-6354
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...
CVE-2024-6354
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...
CVE-2024-6354
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...
PT-2024-37560
Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2024.2.11 and earlier Description The issue is related to improper access control in the PAM dashboard, allowing an authenticated user to bypass execute permission via the PAM dashboard...
CVE-2024-6354: Improper Access Control for Register Interface
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...
CVE-2024-38364 DSpace Cross Site Scripting (XSS) via a deposited HTML/XML document
DSpace is an open source software is a turnkey repository application used by more than 2,000 organizations and institutions worldwide to provide durable access to digital resources. In DSpace 7.0 through 7.6.1, when an HTML, XML or JavaScript Bitstream is downloaded, the user's browser may execu...
Malicious code in execute-with_rescue_with_airbrake (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6893 Malicious code in execute-with_rescue_with_airbrake (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-36999
A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...
CVE-2024-23155
CVE-2024-23155 is a heap-based buffer overflow in Autodesk AutoCAD’s atf_asm_interface.dll triggered by parsing a malicious MODEL file. This can crash the process or enable arbitrary code execution in the context of the current user, with user interaction required in the ZDI advisory. Public sour...
CVE-2024-35527
An arbitrary file upload vulnerability in /fileupload/upload.cfm in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to execute arbitrary code via uploading a crafted .cfm file...
CVE-2024-33278
A buffer overflow vulnerability exists in the ASUS RT-AX88U router (firmware version v3.0.0.4.388_24198 ) due to improper length validation for the cookie field in the connection_state_machine . A remote attacker can exploit this application boundary error to execute arbitrary code on the system ...
CVE-2024-38903
H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...
CVE-2024-5503
The WP Blog Post Layouts plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.3. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary PHP files on the server, allowing the...
CVE-2024-6147
Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...
Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs
Cybersecurity researchers have disclosed details of a now-patched security flaw in Phoenix SecureCore UEFI firmware that affects multiple families of Intel Core desktop and mobile processors. Tracked as CVE-2024-0762 CVSS score: 7.5, the "UEFIcanhazbufferoverflow" vulnerability has been described...