Lucene search
K

4305 matches found

Positive Technologies
Positive Technologies
added 2024/11/13 12:0 a.m.5 views

PT-2024-11915 · Undefined · Undefined

CVE-2024-50986 CVE-20224-50986 DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementi... https://t.co/QByf3fJ8GI...

7.3CVSS7.5AI score0.00987EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/11/12 3:36 p.m.11 views

CVE-2024-50322

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

7.8CVSS0.06027EPSS
Exploits0References1
OSV
OSV
added 2024/11/01 11:9 a.m.5 views

OESA-2024-2326 vorbis-tools security update

Ogg Vorbis is a fully open, non-proprietary, patent-and-royalty-free, general-purpose compressed audio format for mid to high quality 8kHz-48.0kHz, 16+ bit, polyphonic audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. This places Vorbis in the same competitive class as...

7.8CVSS7.6AI score0.00448EPSS
Exploits1References2
OSV
OSV
added 2024/10/30 9:15 p.m.2 views

CVE-2024-48807

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

5.4CVSS6.1AI score0.00258EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/10/26 3:3 a.m.3 views

SUSE CVE-2024-48423

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...

6.6CVSS7.7AI score0.00255EPSS
Exploits1References5
OSV
OSV
added 2024/10/24 9:15 p.m.2 views

DEBIAN-CVE-2024-48423

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...

7.8CVSS7.1AI score0.00255EPSS
Exploits1References1
PyPA
PyPA
added 2024/10/24 9:15 p.m.5 views

PYSEC-2024-120

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...

8.4CVSS7.7AI score0.00255EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/24 12:0 a.m.2 views

PT-2024-33103 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: assimp version 5.4.3 Description: An issue in the Assimp library allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function. This enables the attacker to potentially gain control over the system. Recommendation...

8.8CVSS6.5AI score0.00684EPSS
Exploits9References41
Tenable Nessus
Tenable Nessus
added 2024/10/21 12:0 a.m.16 views

Adobe Illustrator < 24.0 Multiple Vulnerabilities (APSB19-36)

The version of Adobe Illustrator installed on the remote Windows host is prior to 24.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-36 advisory. - Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation...

10CVSS9.5AI score0.03985EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2024/10/21 12:0 a.m.26 views

Adobe Illustrator < 24.0 Multiple Vulnerabilities (APSB19-36) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 24.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-36 advisory. - Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation...

10CVSS8.8AI score0.03985EPSS
Exploits0References5
CVE
CVE
added 2024/10/18 11:6 p.m.61 views

CVE-2024-29821

CVE-2024-29821 affects Ivanti Desktop and Server Management (DSM) prior to 2024.2. The vulnerability allows authenticated local users to execute code with elevated privileges due to insecure ACLs, via an unspecified attack vector. Public sources confirm impact is a local privilege escalation with...

7.8CVSS6.8AI score0.00226EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/18 11:6 p.m.23 views

CVE-2024-29213

Ivanti DSM version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector...

7.8CVSS0.00226EPSS
Exploits0References1
OSV
OSV
added 2024/10/11 4:15 p.m.3 views

CVE-2024-4131

A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevated privileges...

7.8CVSS5.9AI score0.00174EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/11 12:0 a.m.4 views

PT-2024-25347 · Lenovo · Lenovo Baiying

Name of the Vulnerable Software and Affected Versions: Lenovo Baiying affected versions not specified Description: A DLL hijack issue was reported that could allow a local attacker to execute code with elevated privileges. The issue affects Lenovo products and has a high severity level...

7.8CVSS7.2AI score0.00183EPSS
Exploits0References9
OSV
OSV
added 2024/09/27 11:9 a.m.2 views

OESA-2024-2197 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Heap-based buffer overflow...

8.4CVSS7.9AI score0.00274EPSS
Exploits0References2
OSV
OSV
added 2024/09/27 11:9 a.m.2 views

OESA-2024-2195 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Heap-based buffer overflow...

8.4CVSS7.9AI score0.00274EPSS
Exploits0References2
OSV
OSV
added 2024/09/27 11:9 a.m.3 views

OESA-2024-2194 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: Heap-based buffer overflow...

8.4CVSS7.9AI score0.00274EPSS
Exploits0References2
OSV
OSV
added 2024/09/26 4:15 a.m.4 views

CVE-2022-49038

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors...

7.8CVSS6.1AI score0.00203EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2024/09/19 3:11 a.m.2 views

SUSE CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

7.8CVSS7.9AI score0.00274EPSS
Exploits0References4
OSV
OSV
added 2024/09/18 4:15 a.m.1 views

UBUNTU-CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

8.4CVSS7.2AI score0.00274EPSS
Exploits0References4
Rows per page
Query Builder