CVE-2024-45174

The za-internet C-MOR Video Surveillance system (versions 5.2401 through 6.00PL01 ) is vulnerable to SQL injection attacks due to improper validation of user-supplied data in the web interface. An authenticated user can exploit this to execute arbitrary SQL commands within the context of the corr...

hw: amd: SMM Lock Bypass

A flaw was found in hw. Improper validation in a model-specific register MSR could allow a malicious program with ring0 access to modify the SMM configuration while the SMI lock is enabled. This issue can lead to arbitrary code execution...

CVE-2024-45308: Improper Validation of Unsafe Equivalence in Input

HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc 1 with MySQL or MariaDB, it is possible to create notes with an alias matching the ID of existing notes. The affected existing note can then not be accessed anymore and is effectively hidden by t...

CVE-2024-0111: Improper Validation of Specified Quantity in Input

NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering...

CVE-2024-41565

JustEnoughItems JEI 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication...

PT-2024-30110

Name of the Vulnerable Software and Affected Versions Roughly Enough Items REI versions 16.0.729 and before Description The issue is related to a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, allowing in-game item duplication. This is...

CVE-2024-42698

Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...

CVE-2024-41565

JustEnoughItems JEI 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication...

CVE-2024-41564: Improper Validation of Array Index

EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in EMI mod for Minecraft, which allows in-game item duplication...

CVE-2024-41565

CVE-2024-41565 affects JustEnoughItems (JEI) version 19.5.0.33 and earlier, with an improper validation of slot index/position/offset in input for Minecraft that can lead to in‑game item duplication. Red Hat and OSV/NVD disclosures corroborate the vulnerability description. The connected document...

CVE-2024-42698

Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...

CVE-2024-41564

EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in EMI mod for Minecraft, which allows in-game item duplication...

CVE-2024-42698: Improper Validation of Array Index

Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...

CVE-2024-41565: Improper Validation of Array Index

JustEnoughItems JEI 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication...

CVE-2024-41564

EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in EMI mod for Minecraft, which allows in-game item duplication...

CVE-2024-42698

Roughly Enough Items REI v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items REI mod for Minecraft, which allows in-game...

CVE-2024-41565

JustEnoughItems JEI 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index in JEI for Minecraft, which allows in-game item duplication...

Arbitrary File Leakage

Mage AI is vulnerable to Arbitrary File Leakage. The vulnerability is due to improper validation and handling of file paths in the "File Content" request, which allows unauthorized users to access files outside of their intended scope...

OpenSearch Dashboards Security Plugin Security Vulnerabilities

OpenSearch Dashboards Security Plugin is an OpenSearch Dashboards Security Plugin for OpenSearch open source. A security vulnerability exists in OpenSearch Dashboards Security Plugin versions prior to 1.3.19 and prior to 2.16.0 that stems from improper validation of the nextUrl parameter, which m...

Improper Validation Of Non-deterministic Behavior

github.com/cosmwasm/wasmd is vulnerable to Improper validation of non-deterministic behavior. The vulnerability is due to the incorrect marking of the SmartContractState query as safe, which may cause non-deterministic outcomes across different nodes. Attackers can potentially exploit this...