CVE-2024-5351

CVE-2024-5351 affects anji-plus AJ-Report up to 1.4.1. The vulnerability is in the Javascript Handler’s getValueFromJs function, where a deserialization issue can be triggered. This allows a remote attacker to exploit the flaw, with public disclosure of the exploit, per the CVE description and re...

CVE-2024-30056

Microsoft Edge Chromium-based Information Disclosure Vulnerability...

CVE-2024-30056

Microsoft Edge (Chromium-based) information disclosure vulnerability CVE-2024-30056 is reported across multiple sources (NVD/CNVD/Nessus/NVD references). Affected product: Microsoft Edge (Chromium-based). Issue: information disclosure vulnerability; exact root cause is not detailed in the provide...

CVE-2024-5336

CVE-2024-5336 affects Ruijie RG-UAC up to 20240516. The vulnerability resides in the addVlan function at /view/networkConfig/vlan/vlan_add_commit.php, where manipulation of the phyport argument leads to an OS command injection. It is a network-facing issue with remote exploitation; the exploit ha...

CVE-2024-35232

github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. accesstoken can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2...

CVE-2024-35373

Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php...

CVE-2024-33471

An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681_B20230703 contains a stack overflow in the urldecode function triggered via the password parameter. Multiple sources (NVD/CNVD/Red Hat/CVE entries) describe the vulnerability as arising from insufficient input length validation, enabling arbitrary code execution or a...

CVE-2023-46442

CVE-2023-46442 affects the Soot framework (Java 8) where an infinite loop in retrieveActiveBody can cause DoS. Public details confirm vulnerable versions prior to 4.4.1 and an exploit/POC exists demonstrating resource exhaustion. Remediation per sources is to upgrade to Soot 4.4.1 or later; as a ...

CVE-2024-34995

svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.cym.controller.UserControllerimportOver. This vulnerability allows attackers to delete arbitrary files via a crafted POST request...

CVE-2024-33809

PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks...

CVE-2024-35618

PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer...

CVE-2024-22588

Kwik commit 745fd4e2 does not discard unused encryption keys...

CVE-2024-31510

An issue in Open Quantum Safe liboqs v.10.0 allows a remote attacker to escalate privileges via the cryptosignsignature parameter in the /pqcrystals-dilithium-standardml-dsa-44-ipdavx2/sign.c component...

CVE-2021-47561

In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: disable timeout handling If a timeout is hit, it can result is incorrect data on the I2C bus and/or memory corruptions in the guest since the device can still be operating on the buffers it was given while the guest...

CVE-2021-47519

In the Linux kernel, the following vulnerability has been resolved: can: mcan: mcanreadfifo: fix memory leak in error branch In mcanreadfifo, if the second call to mcanfiforead fails, the function jump to the outfail label and returns without calling mcanreceiveskb. This means that the skb...

CVE-2021-47504

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2021-47570

CVE-2021-47570 is addressed in the Linux kernel staging area (rt8188eu driver). The issue was a memory leak in rtw_wx_read32() where ptmp was not freed before returning -EINVAL. A fix (memory cleanup) has been applied to resolve this vulnerability; references point to kernel stable commits that i...

CVE-2021-47568

CVE-2021-47568 concerns the ksmbd module in the Linux kernel, where a memory leak in get_file_stream_info() (fs/ksmbd/smb2pdu.c) could lead to resource exhaustion and a denial-of-service risk. The issue is resolved in the provided documents by applying a fix for the memleak; exploitation details ...

CVE-2021-47567

CVE-2021-47567 describes a Linux kernel vulnerability in the powerpc/32 code where a vmap stack overflow could lead to a hard lockup when the data MMU is not active. The root cause is that emergency_ctx was accessed with a virtual address during MMU inactivity; the fix uses a physical address ins...