CVE-2024-34274

OpenBD version 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data . The software uses serialized data within the bdglobals and bdclient_spot cookies, which an attacker could exploit to execute arbitrary code on the system. This vulnerability specifically impacts products th...

CVE-2024-35061

NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution...

CVE-2024-35056

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

CVE-2024-22275

CVE-2024-22275 affects VMware vCenter Server and is a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell can exploit it to read arbitrary sensitive data from files, with Confidentiality impact rated High and other impacts not affected....

CVE-2024-22274

VMware vCenter Server CVE-2024-22274 is an authenticated RCE that requires an admin on the vCenter appliance shell to run arbitrary OS commands. Public IBM Red Hat and other advisories confirm the issue and severity (CVSS 7.2, High) with a path to remediation: upgrade vCenter to a fixed release (...

CVE-2024-22273

CVE-2024-22273 affects VMware ESXi, Workstation, and Fusion storage controllers, with an out-of-bounds read/write flaw that may let a VM-adjacent attacker cause a denial of service or, in conjunction with other issues, execute code on the hypervisor. Exploitation is described as local (requires a...

CVE-2024-27129

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS...

CVE-2023-52824

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-52822

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-52823

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-52818

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 For pptable structs that use flexible array sizes, use flexible arrays...

CVE-2023-52788

In the Linux kernel, the following vulnerability has been resolved: i915/perf: Fix NULL deref bugs with drmdbg calls When i915 perf interface is not available dereferencing it will lead to NULL dereferences. As returning -ENOTSUPP is pretty clear return when perf interface is not available...

CVE-2023-52793

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-52734

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-27130

A stack-based buffer overflow vulnerability affects QNAP QTS and QuTS hero operating systems. The flaw originates from the unsafe use of the strcpy function within the No_Support_ACL function of the share.cgi script. An unauthenticated attacker can exploit this by sending a specially crafted requ...

CVE-2024-27128

CVE-2024-27128 affects QNAP QTS and QuTS hero. A buffer copy without input size checking could allow authenticated network-based code execution. Affected versions are QTS 5.1.x and QuTS hero h5.1.x, with fixes in QTS 5.1.7.2770 build 20240520 and later and QuTS hero h5.1.7.2770 build 20240520 and...

CVE-2024-31845

An issue was discovered in Italtel Embrace version 1.6.4 , a cloud-enabled Web application server, where the software fails to properly neutralize output written to logs. The web application utilizes a GET query string parameter for logging, which an attacker can modify to attribute their actions...

CVE-2023-52867

CVE-2023-52867 affects the Linux kernel drm/radeon driver: a buffer overflow in the AFMT status buffer (afmt_status, size 6) can occur because afmt_idx is checked after access. The issue is resolved in kernel updates referenced by multiple advisories (e.g., Amazon Linux 2 ALAS-2025-2834 and Unity...

CVE-2023-52864

CVE-2023-52864 affects the Linux kernel (platform/x86) WMI implementation. The root cause is a memory corruption risk when wmi_char_open() runs if the associated driver is missing, due to the miscdevice pointer being stored in filp->private_data after the patch in drivers/misc: pass miscdevice...

CVE-2023-52861

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: it66121: Fix invalid connector dereference Fix the NULL pointer dereference when no monitor is connected, and the sound card is opened from userspace. Instead return an empty buffer of zeroes as the EDID information ...