CVE-2024-42424: Improper Input Validation

Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Improper Input Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2024-38230: Improper Input Validation

Windows Standards-Based Storage Management Service Denial of Service Vulnerability...

CVE-2024-43455: Improper Input Validation

Windows Remote Desktop Licensing Service Spoofing Vulnerability...

CVE-2024-38046: Improper Input Validation

PowerShell Elevation of Privilege Vulnerability...

CVE-2024-38244: Improper Input Validation

Kernel Streaming Service Driver Elevation of Privilege Vulnerability...

CVE-2024-38216: Improper Input Validation

Azure Stack Hub Elevation of Privilege Vulnerability...

Adobe Illustrator < 27.9.6 / 28.0.0 < 28.7.1 Multiple Vulnerabilities (APSB24-66)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.6, 28.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-66 advisory. - Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe Illustrator < 27.9.6 / 28.0.0 < 28.7.1 Multiple Vulnerabilities (APSB24-66) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 27.9.6, 28.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-66 advisory. - Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow Wrap or Wraparound...

CVE-2024-38245: Improper Input Validation

Kernel Streaming Service Driver Elevation of Privilege Vulnerability...

CVE-2024-38243: Improper Input Validation

Kernel Streaming Service Driver Elevation of Privilege Vulnerability...

Improper Input Validation

github.com/cosmos/interchain-security is vulnerable to Improper Input Validation. The vulnerability is caused due to a missing validation on the ICS side to check if the signer matches the provider address. This can lead to any user opt-in, opt-out, change the commission rate, or change what publ...

Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor

Progress Software has released security updates for a maximum-severity flaw in LoadMaster and Multi-Tenant MT hypervisor that could result in the execution of arbitrary operating system commands. Tracked as CVE-2024-7591 CVSS score: 10.0, the vulnerability has been described as an improper input...

CVE-2024-39718

An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with permissions equivalent to those of the service account...

CVE-2024-39718

CVE-2024-39718 is a vulnerability in Veeam Backup & Replication 12.x (notably affected builds include 12.1.2.172 and earlier) where a low-privileged user can remotely remove files with the service account’s permissions due to improper input validation. Connected sources confirm this CVE affects m...

CVE-2024-39718: Undefined Security Weakness

An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with permissions equivalent to those of the service account...

PT-2024-31460

Name of the Vulnerable Software and Affected Versions za-internet C-MOR Video Surveillance version 5.2401 Description An issue was discovered due to improper input validation, making the C-MOR web interface vulnerable to reflected cross-site scripting XSS attacks. Different functions are prone to...

CVE-2024-45178

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to download arbitrary files from the C-MOR system via a path traversal attack. It was found out that different functionalities are vulnerable to path traversal attacks, du...

CVE-2024-45171

The za-internet C-MOR Video Surveillance system, version 5.2401 , is vulnerable to an unrestricted upload of files with dangerous types (CWE-434) due to improper user input validation. A low-privileged authenticated user can exploit the backup file upload functionality by providing a filename con...

CVE-2024-45178

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to download arbitrary files from the C-MOR system via a path traversal attack. It was found out that different functionalities are vulnerable to path traversal attacks, du...

CVE-2024-45171

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to upload dangerous files, for instance PHP code, to the C-MOR system. By analyzing the C-MOR web interface, it was found out that the upload functionality for backup file...