CVE-2024-4150

The CVE-2024-4150 issue affects the WordPress plugin Simple Basic Contact Form, up to version 20221201. It enables Reflected Cross-Site Scripting via the scf_email parameter due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts in pages e...

CVE-2024-4107

Technical details about CVE-2024-4107 are not publicly provided in the supplied documents. Monitoring for updates is recommended.

CVE-2022-32507

CVE-2022-32507 involves a vulnerability in certain Nuki Home Solutions devices where BLE commands that should require privileged access could be invoked by unprivileged accounts due to missing access controls across account types. Affected products: Nuki Smart Lock 3.0 prior to 3.3.5 and Nuki Sma...

CVE-2024-34220

CVE-2024-34220 affects Sourcecodester Human Resource Management System 1.0 and is described as a SQL Injection via the 'leave' parameter. Public PoC/exploit code exists (e.g., on GitHub), showing parameterized input being unsafely handled and allowing sleep-based timing tricks. Red Hat/PT-Securit...

CVE-2024-24157

Gnuboard g6 is affected by CVE-2024-24157 due to a Cross Site Scripting (XSS) flaw in board.py stemming from commit c2cc1f5069e00491ea48618d957332d90f6d40e4. The vulnerability is described consistently across sources (NVD, Red Hat, OSV, CVE List, CVE.org, CNVD, VulnEnrichment, PT Security). Explo...

CVE-2024-4545

CVE-2024-4545 affects EnterpriseDB Postgres Advanced Server (EPAS). All EPAS versions 15.0 up to 15.7.0 and 16.0 up to 16.3.0 permit users using edbldr to bypass role permissions from pg_read_server_files, allowing low-privilege users to read files they would normally be unable to access. The und...

CVE-2023-29881

CVE-2023-29881 affects phpok 6.4.003; the vulnerability is in index_f() within phpok64/framework/api/call_control.php, enabling SQL injection (CVE details show low confidentiality and integrity impact, no availability impact). Exploitation details are not provided. Remediation: as a temporary wor...

CVE-2024-34338

Summary: CVE-2024-34338 affects Tenda O3V2 firmware 1.0.0.10 and 1.0.0.12, with a Blind Command Injection via the dest parameter in the /goform/getTraceroute API. The root cause is an injection in that endpoint, allowing arbitrary commands to run with root privileges. Authentication is required t...

CVE-2024-31953

Samsung Magician 8.0.0 on macOS is affected by a local privilege escalation vulnerability due to tampering with directories and executables used during installation, allowing arbitrary code execution after the attacker already has user privileges and an administrator password is entered during in...

CVE-2024-4682

CVE-2024-4682 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in the unknown functionality of /view/exam_timetable_update_form.php, triggered by manipulating the exam parameter. It can be exploited remotely and is publicly disclo...

CVE-2024-4681

CVE-2024-4681 concerns Campcodes Legal Case Management System 1.0. The vulnerability affects the file/roadmap area: the unknown function in the Settings Handler at /admin/general-setting allows manipulation of the favicon/logo argument, resulting in unrestricted upload. This enables a remote atta...

CVE-2024-33877

CVE-2024-33877 affects HDF5 Library up to version 1.14.3, with a heap-based buffer overflow in H5T__conv_struct_opt (H5Tconv.c). This is cited in connected advisories as a vulnerability in HDF5 1.14.x, with public documentation of the same root cause. The Tencent/Tenable listings confirm the issu...

CVE-2024-33876

CVE-2024-33876 affects HDF5 Library up to version 1.14.3, with a heap buffer overflow in H5S__point_deserialize (H5Spoint.c). The vulnerability is tied to HDF5’s data-space serialisation, and is reported as a heap buffer overflow with a local attack vector and potential impact on availability and...

CVE-2024-33875

The CVE-2024-33875 issue affects the HDF5 Library up to version 1.14.3, with a heap-based overflow in H5O__layout_encode (H5Olayout.c) that can corrupt the instruction pointer. Across connected advisories (Astra Linux, SUSE/OpenSUSE, Tencent/TASSA sheets, and related Nessus/OpenVAS entries), the ...

CVE-2024-33874

CVE-2024-33874 affects HDF5 Library up to version 1.14.3, where a heap buffer overflow occurs in H5O__mtime_new_encode (H5Omtime.c). Public advisories (Tencent/TSSA-2024:0175) enumerate this CVE among a set of HDF5 issues; a mitigation is to upgrade to HDF5 1.14.4 or later as indicated by the ven...

CVE-2024-33873

CVE-2024-33873 affects the HDF5 Library up to version 1.14.3 and involves a heap-based buffer overflow in H5D__scatter_mem (H5Dscatgath.c). The vulnerability is reported across multiple security feeds (e.g., Azure Linux 3.0 Nessus, vendor advisories) and is mitigated by upgrading to HDF5 1.14.4 o...

CVE-2024-32624

The CVE-2024-32624 entry refers to a heap-based buffer overflow in HDF5 Library up to version 1.14.3, specifically in H5T__ref_mem_setnull (H5Tref.c) invoked by H5T__conv_ref (H5Tconv.c), which can corrupt the instruction pointer. The connected materials confirm this vulnerability is associated w...

CVE-2024-32622

CVE-2024-32622 affects HDF5 Library up to version 1.14.3 and involves an out-of-bounds read in H5FL_arr_malloc (invoked from H5S_set_extent_simple in H5S.c via H5FL.c). Public technical detail from Tencent/TSSA advisory confirms the vulnerability and notes that a fix was issued in HDF5 1.14.4. Im...

CVE-2024-32619

CVE-2024-32619 affects HDF5 Library up to version 1.14.3. The flaw is a heap-based buffer overflow in H5T_copy_reopen (H5T.c) that can corrupt the instruction pointer. Impact is denial of service or potential code execution. Remediation: upgrade to HDF5 1.14.4 or later where the issue is fixed. R...

CVE-2024-32618

CVE-2024-32618 affects HDF5 Library up to v1.14.3, where a heap-based overflow in H5T__get_native_type (H5Tnative.c) can corrupt the instruction pointer. Impact is denial of service and potential code execution. The issue is fixed in HDF5 1.14.4; users should upgrade to 1.14.4 or later. The CVE e...