CVE-2024-3044

CVE-2024-3044 concerns LibreOffice: Unchecked script execution in Graphic on-click binding allows a document to trigger built-in scripts when clicking a graphic, previously treated as trusted but now untrusted. The vulnerability affects multiple LibreOffice builds across distributions, with remed...

CVE-2024-31556

Reportico Web versions prior to v.8.1.0 are vulnerable to an issue that allows a local attacker to execute arbitrary code and obtain sensitive information via the sessionid function. This vulnerability is caused by the application's failure to properly invalidate session cookies upon logout, whic...

CVE-2021-22280

CVE-2021-22280 крат: B&R Automation Studio versions 4.0–4.11 suffer from improper DLL loading, enabling an authenticated local attacker to execute code in the product context. The issue is confirmed across multiple sources (PT-2024-10875, Red Hat/NVD records). Impact is local code execution with ...

CVE-2024-0862

The CVE-2024-0862 entry concerns the Proofpoint Encryption endpoint in Proofpoint Enterprise Protection. A Server-Side Request Forgery exists that lets an authenticated user relay HTTP requests from the Protection server to internal, private network addresses. Affected component: Proofpoint Encry...

CVE-2024-33485

The CASAP Automated Enrollment System (version V1.0 ) contains a SQL Injection vulnerability within the login.php component. This flaw is caused by the improper neutralization of special elements used in SQL commands when handling PHP/MySQLi requests. A remote attacker can exploit this by sending...

CVE-2024-4776

The Mozilla Firefox web browser is affected by a security bypass vulnerability where a file dialog box displayed in full-screen mode could cause the window to remain disabled. This allows attackers to bypass certain security restrictions. The vulnerability affects versions earlier than 126 . Whil...

CVE-2024-4778

Mozilla Firefox versions earlier than 126 are affected by memory safety bugs involving improper handling of overlaps between protected memory regions . These vulnerabilities can lead to arbitrary code execution , denial of service , and the compromise of confidential data or system integrity. Pub...

CVE-2024-4775

Mozilla Firefox versions prior to 126 are affected by a vulnerability where a missing iterator stop condition when handling WASM code in the built-in profiler can lead to invalid memory access and undefined behavior . This issue is only triggered when the profiler is active. While some reports su...

CVE-2024-4766

This vulnerability affects Firefox for Android versions prior to 126 . The issue stems from various techniques used to obscure the fullscreen notification , which could lead to user confusion and spoofing attacks where a victim is convinced to visit a specially crafted website. While several gene...

CVE-2024-4769

Mozilla Firefox (< 126), Firefox ESR (< 115.11), and Thunderbird (

CVE-2024-4770

This vulnerability affects Firefox < 126 , Firefox ESR < 115.11 , and Thunderbird

CVE-2024-4367

CVE-2024-4367 concerns a missing type check when handling fonts in PDF.js, allowing arbitrary JavaScript execution within the PDF.js context. Affected products listed in connected docs include Firefox before 126, Firefox ESR before 115.11, and Thunderbird before 115.11. The root cause is limited ...

CVE-2024-27110

CVE-2024-27110 is an elevation-of-privilege vulnerability in GE HealthCare EchoPAC products. Public docs describe EchoPAC (and related EchoPAC-associated workstations) as affected; the underlying root cause and specific vulnerable components/versions are not detailed in the provided sources. The ...

CVE-2024-27109

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2024-27109.

CVE-2024-27108

CVE-2024-27108 affects GE HealthCare EchoPAC; root cause is a permission/configuration issue that allows non-privileged access to critical files. Impact per sources: confidentiality, integrity, and availability HIGH. Related entries (PT-2024-3657) describe incorrect permission assignments enablin...

CVE-2024-27107

CVE-2024-27107 concerns GE HealthCare EchoPAC with a weakness in credentials (hard-coded/predefined passwords) in the EchoPAC workflow. Affected component is EchoPAC (and related EchoPAC deployment scenarios) and the root cause is credential handling allowing unauthorized access. The connected do...

CVE-2024-27106

The CVE-2024-27106 entry concerns GE HealthCare EchoPAC products with vulnerable data in transit due to a lack of encryption. Affected component/behavior is data in transit handling, and the underlying root cause is insufficient encryption measures. Reported impact is potential unauthorized acces...

CVE-2024-30054

CVE-2024-30054 concerns the Microsoft.PowerBI.JavaScript NuGet package, specifically versions prior to 2.23.1, which are vulnerable to an information disclosure via user interaction. The Nessus plugin cites a

CVE-2024-30051

CVE-2024-30051 is an Elevation of Privilege in the Windows Desktop Window Manager (DWM) core library dwmcore.dll. The root cause is a heap-based buffer overflow in CCommandBuffer::Initialize caused by a size miscalculation (integer division) that can overflow the heap during a heap spray, allowin...

CVE-2024-30049

CVE-2024-30049 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability affecting the Win32K component. Public details in connected sources indicate the issue enables elevated privileges with local access (CVSSv3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H; base score 7.8), and multipl...