CVE-2024-21788

CVE-2024-21788 affects Intel GPA software (and related GPA components) prior to 2023.4, via an uncontrolled search path in the executable or library loading. The root cause is an uncontrolled search path that could allow an authenticated user with local access to escalate privileges. Affected pro...

CVE-2024-21861

Intel GPA Framework software before version 2023.4 is affected by an Uncontrolled search path vulnerability that can allow an authenticated user to escalate privileges via local access. The issue resides in the GPA Framework/Intel GPA software prior to 2023.4 and is mitigated by updating to versi...

CVE-2024-24981

The CVE-2024-24981 issue affects Intel Server M50FCP Family UEFI firmware, specifically the PfrSmiUpdateFw driver, where improper input validation may enable privilege escalation via local access. Reported by multiple sources (NVD/Red Hat/CVE listings) with a CVSS v3.1 base score of 7.5 (High), l...

CVE-2024-22476

CVE-2024-22476 affects Intel Neural Compressor before version 2.5.0, due to improper input validation that enables an unauthenticated attacker to potentially achieve remote escalation of privilege via SQL injection. The Nuclei template and Intel advisory corroborate the affected product/version a...

CVE-2024-5023

CVE-2024-5023 affects Netflix ConsoleMe prior to 1.4.0. Root cause: improper neutralization of special elements used in a command within Template resources flow, enabling command execution via crafted inputs. Documentation indicates authenticated users can achieve limited remote code execution co...

CVE-2024-27260

CVE-2024-27260 : IBM AIX and VIOS are affected by a vulnerability in the invscout command that could allow a non-privileged local user to execute arbitrary commands. Affected products/versions: AIX 7.2 and 7.3; VIOS 3.1 and 4.1 (invscout.rte 2.2.0.0–2.2.0.26). Root cause is the invscout component...

CVE-2024-34760

CVE-2024-34760: Stored XSS in WPBlockart Magazine Blocks due to improper neutralization of input during web page generation. Affected: Magazine Blocks versions up to 1.3.6 (no details on fixed version or patch in the provided documents). The Connected Red Hat entry and Wordfence report confirm th...

CVE-2024-34805

CVE-2024-34805 is an stored XSS in the Webvitaly iFrame plugin (WordPress). The root cause is improper neutralization of input during web page generation, enabling stored cross-site scripting in iFrame output. Affected range is iFrame: from n/a through 5.0. Public feeds indicate this vulnerabilit...

CVE-2024-34751

CVE-2024-34751 is a vulnerability in the WordPress plugin “Order Export & Order Import for WooCommerce” (affected: versions up to and including 2.4.9). The issue is a deserialization of untrusted data leading to an authenticated PHP Object Injection, requiring Administrator+ privileges to exploit...

CVE-2024-34808

CVE-2024-34808 is an authenticated path traversal vulnerability in JCH Optimize for WordPress (JCH Optimize

CVE-2024-4956

Sonatype Nexus Repository Manager 3 (versions 3.0 to 3.68.0) is vulnerable to an unauthenticated path traversal vulnerability. An attacker can craft a malicious URL to download sensitive system files , such as /etc/passwd, from outside the application's scope. This vulnerability has been addresse...

CVE-2024-34273

The njwt library (NPM) versions up to v0.4.0 are affected by a prototype pollution vulnerability located in the Parser.prototype.parse method. This flaw occurs during the parsing process, which potentially allows an attacker to modify the prototype of an object. Affected products using njwt as a ...

CVE-2024-20326

The CVE-2024-20326 entry applies to Cisco ConfD CLI and Cisco Crosswork NSO CLI. The vulnerability stems from improper authorization enforcement for specific CLI commands, allowing an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying OS. Exp...

CVE-2024-4999

CVE-2024-4999 affects Ligowave UNITY (up to 6.95-2), PRO (up to 6.95-1.Rt3883), MIMO (up to 6.95-1.Rt2880), and APC Propeller (up to 2-5.95-4.Rt3352). The issue is a vulnerability in the web-based management interface that could allow an authenticated remote attacker to execute arbitrary commands...

CVE-2024-30292

CVE-2024-30292 pertains to Adobe FrameMaker, affecting versions 2020.5 and 2022.3 and earlier. The issue is an out-of-bounds write in GIF file parsing that could enable arbitrary code execution in the context of the current user . Exploitation requires user interaction: a victim must open a malic...

CVE-2024-30291

CVE-2024-30291 affects Adobe FrameMaker 2020.5 and 2022.3 and earlier, due to an out-of-bounds write in TIF file parsing that could lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a malicious file). Public details across connected...

CVE-2024-30283

Adobe FrameMaker (versions 2020.5, 2022.3 and earlier) is affected by an out-of-bounds read vulnerability in ICO file parsing that could disclose memory contents and bypass ASLR. Impact is memory disclosure with no integrity/availability impact stated; exploitation requires user interaction (vict...

CVE-2024-30289

CVE-2024-30289 affects Adobe FrameMaker; a Stack-based Buffer Overflow in the XLS file parsing can allow arbitrary code execution in the context of the current user. Affected versions are FrameMaker 2020.5 and 2022.3 and earlier. Exploitation requires user interaction: the victim must open a mali...

CVE-2024-35299

The CVE-2024-35299 entry concerns JetBrains YouTrack prior to version 2024.1.29548, where SMTPS protocol communication lacked proper certificate hostname validation. This creates a potential exposure related to TLS hostname verification, with the NVD CVSS data indicating high impact on confidenti...

CVE-2024-4975

Summary: CVE-2024-4975 affects code-projects Simple Chat System 1.0, specifically the Message Handler component. The connected PT-2024-33661 and related sources confirm a cross-site scripting (XSS) vulnerability that can be triggered remotely. The exploit has been disclosed publicly. Affected com...