CVE-2024-32058

Summary (CVE-2024-32058): Siemens/Simcenter Femap prior to V2406 is affected by a memory corruption vulnerability when parsing crafted IGS files, potentially enabling code execution in the current process. The issue is caused by memory corruption in the parser (buffer/memory handling) for IGS inp...

CVE-2024-32057

CVE-2024-32057 affects Siemens/Simcenter Femap, with versions prior to V2406 vulnerable to a type confusion flaw when parsing IGS files, potentially allowing code execution in the current process. The issue is documented across multiple sources, confirming affected product and version range and t...

CVE-2024-32055

CVE-2024-32055 – Simcenter Femap is affected in all versions prior to V2406. The vulnerability is an out-of-bounds read past the end of an allocated structure while parsing specially crafted IGS files, which could allow an attacker to execute code in the context of the current process. Affected p...

CVE-2024-31980

The CVE-2024-31980 issue affects Siemens Parasolid: V35.1 (all < V35.1.256), V36.0 (all < V36.0.210), and V36.1 (all

CVE-2024-30208

CVE-2024-30208 affects Siemens SIMATIC RTLS Locating Manager (multiple SKUs) with all versions before 3.0.1.1. The DBTest tool fails to enforce access restrictions, allowing an authenticated local attacker to extract memory-resident sensitive information. Impact is limited to memory exposure of c...

CVE-2024-27945

Affected product: Siemens RUGGEDCOM CROSSBOW. Vulnerability: External control of file name or path via the bulk import feature, enabling a privileged user to upload files to the root installation directory and potentially tamper files or achieve remote code execution. Root cause/vector: Bulk impo...

CVE-2024-25965

Dell PowerScale OneFS (versions 8.2.x–9.7.0.2) contains an external control of file name or path vulnerability. A local high-privilege attacker could exploit this to cause denial of service. Impact is aligned with local access and high-privilege requirements; no in-wild exploit details are provid...

CVE-2024-25967

CVE-2024-25967 affects Dell PowerScale OneFS versions 8.2.x–9.7.0.1 with an execution flow that grants unnecessary privileges, enabling local attackers with high privileges to escalate rights. The root cause is described as access control issues leading to privilege escalation. Exploitation detai...

CVE-2024-25968

Dell PowerScale OneFS (versions 8.2.x–9.7.0.2) is affected by a vulnerability due to defective cryptographic algorithms that could allow a remote unauthenticated attacker to cause information disclosure. The exploitation details are not provided in the document, and the entry notes that a fix exi...

CVE-2024-4144

CVE-2024-4144 affects the WordPress plugin Simple Basic Contact Form . The vulnerability allows unauthenticated attackers to execute arbitrary shortcodes, via an arbitrary shortcode execution flaw in all versions up to 20240502. The CVSS baseline in the connected data is 6.5 (Medium) with network...

CVE-2024-33006

SAP NetWeaver App Server ABAP/ABAP Platform is affected by a file-upload vulnerability (CVE-2024-33006) due to insufficient validation of uploaded files. An unauthenticated attacker can upload a malicious file to the server; when accessed by a victim, this can lead to complete system compromise. ...

CVE-2024-34687

CVE-2024-34687 affects SAP NetWeaver Application Server for ABAP and ABAP Platform. The vulnerability is an XSS issue caused by insufficient encoding of user-controlled inputs, potentially allowing an attacker to inject code that runs in a user’s browser. Impact aligns with the vuln description: ...

CVE-2024-33008

CVE-2024-33008 affects SAP Replication Server. An attacker can use a gateway to RSSD to execute commands, potentially causing memory corruption and a high impact on Availability. Documented impact aligns with network-exploitability, low complexity, but requires high privileges; exploitation statu...

CVE-2024-32733

CVE-2024-32733 affects SAP NetWeaver Application Server ABAP and ABAP Platform. The issue arises from missing input validation and output encoding of untrusted data, enabling an unauthenticated attacker to inject malicious JavaScript into a dynamically crafted web page. Exploitation can lead to t...

CVE-2023-6812

CVE-2023-6812 affects WP Compress – Image Optimizer (All-In-One) for WordPress. The vulnerability is an Open Redirect in all versions up to and including 6.20.01, caused by insufficient validation of the redirect URL supplied via the css parameter. This can allow unauthenticated attackers to tric...

CVE-2024-4810

CVE-2024-4810 is rejected/not used; it has been replaced by CVE-2024-36015.

CVE-2024-4855

CVE-2024-4855 describes a use-after-free in editcap (part of Wireshark) that can cause a denial of service when processing crafted capture files. The vulnerability stems from improper memory handling in the editcap component, leading to potential crash or resource exhaustion on affected builds. C...

CVE-2024-4853

CVE-2024-4853 corresponds to a memory handling issue in editcap that could cause a denial of service via crafted capture files in Wireshark. The connected advisories confirm affected components (Wireshark/editcap) and indicate patches/upgrades are available; for example, Debian LTS DLA-3906-1 not...

CVE-2024-27843

CVE-2024-27843 — macOS privilege escalation (logic issue) Affected product: macOS Sonoma (fix implemented in 14.5). Issue: A logic bug addressed by improved checks could allow an app to elevate privileges. Impact: Privilege escalation with high impact as indicated by CVSS metrics (Local attack, n...

CVE-2024-23236

CVE-2024-23236 is a local, correctness-type issue in macOS Sonoma 14.5 where an app may read arbitrary files. The publicly documented fix is in macOS Sonoma 14.5 (Apple security content cites CFNetwork as affected). The provided sources indicate the vulnerability is addressed by the macOS 14.5 up...