CVE-2024-24963

A confirmed vulnerability in AutomationDirect P3-550E (Productivity3000) firmware v1.2.10.9 and related Programming Software Connection FileSelect handler (IMM 0x12) causes a stack-based buffer overflow when constructing a local filename from attacker-supplied path data. Talos details show an 0x1...

CVE-2024-22187

CVE-2024-22187 is a write-what-where vulnerability in AutomationDirect P3-550E (FW 1.2.10.9, SW 4.1.1.10) exposed via the Programming Software Connection service over UDP/port 9999. The flaw allows an unauthenticated remote attacker to write arbitrary data to arbitrary memory locations, enabling ...

CVE-2024-23315

CVE-2024-23315 affects AutomationDirect Productivity PLCs, specifically the P3-550E series (Firmware 1.2.10.9). The TALOS/Red Hat and CVE reports describe a remote, unauthenticated read-what-where vulnerability in the Programming Software Connection IMM 01A1 Memory Read feature. An attacker can s...

CVE-2024-21785

CVE-2024-21785 describes a leftover debug code vulnerability in AutomationDirect P3-550E (FW 1.2.10.9) affecting the Telnet Diagnostic Interface. Talos details show an attacker who can reach the device over ModbusRTU or the Telnet path to unlock an in-device diagnostic CLI or enable remote diagno...

CVE-2024-23601

AutomationDirect P3-550E (FW 1.2.10.9; SW 4.1.1.10) is affected by CVE-2024-23601. Cisco Talos reports a code-injection vulnerability in the scan_lib.bin module: the binary is only CRC-validated, allowing a remote attacker to replace scan_lib.bin with malicious code that executes on load or durin...

CVE-2024-35324

CVE-2024-35324 affects Douchat 4.0.5 and is described as an arbitrary file upload vulnerability via the endpoint Public/Plugins/webuploader/server/preview.php. The CVSSv3.1 base score is 9.8 (CRITICAL) with network attack vector, no privileges required, no user interaction, and impacts to confide...

CVE-2024-33849

The CVE-2024-33849 entry concerns ci solution CI-Out-of-Office Manager (versions up to 6.0.0.77) that uses a hard-coded cryptographic key. The issue, described across multiple sources (including PT-Security and Red Hat), implies potential unauthorized access or decryption of sensitive data due to...

CVE-2024-35400

CVE-2024-35400 concerns TOTOLINK CP900L (v4.1.5cu.798_B20221228). A stack overflow in the SetPortForwardRules function triggered via the desc parameter is reported, potentially enabling denial of service. Connected sources consistently identify the same vulnerable component and input vector but d...

CVE-2024-5274

CVE-2024-5274 is a type confusion flaw in Google Chrome’s V8 engine (Chromium-based) that could allow a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. The vulnerability affects Chrome versions prior to 125.0.6422.112 (Windows, macOS, Linux) and is cla...

CVE-2024-35399

TOTOLINK CP900L v4.1.5cu.798_B20221228 is affected by a stack overflow in the loginAuth function triggered by the password parameter. The root cause is improper validation of input length/size in loginAuth, enabling possible arbitrary code execution or denial of service. Documented impact is high...

CVE-2024-4429

OpenText iManager 3.2.6.0200 is affected by a Cross-Site Request Forgery vulnerability. The issue could lead to sensitive information disclosure as described in CVE-2024-4429. Connected sources confirm the vulnerable component is the OpenText iManager web console, with the root cause tied to CSRF...

CVE-2024-3969

CVE-2024-3969 affects OpenText iManager 3.2.6.0200 and is described as an XML External Entity (XXE) injection vulnerability that could lead to remote code execution by parsing untrusted XML payloads. The public records indicate a CVSSv3.1 base score of 9.8 (CRITICAL) with network attack vector, n...

CVE-2024-35398

Totolink CP900L firmware version 4.1.5cu.798_B20221228 contains a stack overflow in the setMacFilterRules function, triggered by the desc parameter. Exploitation could allow a remote attacker to impact the device’s confidentiality, integrity, and availability (potential remote code execution or D...

CVE-2024-35397

Affected product: TOTOLINK CP900L, version 4.1.5cu.798_B20221228. Vulnerability: Command injection in the NTPSyncWithHost function triggered by the hostTime parameter. Impact: Arbitrary command execution by an attacker via a crafted request (high impact, per CVSS 3.1 metrics). Root cause: Inadequ...

CVE-2024-2451

CVE-2024-2451 concerns improper fingerprint validation in the TeamViewer Client (Full & Host) before version 15.54 on Windows and macOS. The root cause is faulty fingerprint validation, which could allow a local attacker with administrative rights to elevate privileges via executable sideloading....

CVE-2024-29072

A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege...

CVE-2024-23951

Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the...

CVE-2024-24584

Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.This vulnerabilitty concerns thereadMSH function while processin...

CVE-2024-23948

Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the...

CVE-2023-49600

An out-of-bounds write vulnerability exists in the PlyFile plycastascii functionality of libigl v2.5.0. A specially crafted .ply file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...