CVE-2024-33844

CVE-2024-33844 affects Parrot ANAFI USA firmware 1.10.4, where the MAV_MISSION_TYPE values (0, 1, 2, 255) are not validated in the MAVLink MISSION_COUNT path. This allows an attacker to sever the link between controller and drone by sending a malformed MISSION_COUNT, potentially causing a denial ...

CVE-2024-33789

CVE-2024-33789 affects Linksys E5600 firmware v1.1.0.26, with a command injection vulnerability in the /API/info endpoint exploitable via the ipurl parameter. Root cause: improper handling/filtering of command-related characters in ipurl within runtime.pingTest(), enabling arbitrary command execu...

CVE-2024-33793

CVE-2024-33793 affects netis-systems MEX605 v2.00.06. A crafted payload to the device’s ping test page allows attackers to execute arbitrary OS commands. Documented impact is arbitrary command execution with local attack vector, low privileges, no user interaction. No explicit exploitation detail...

CVE-2024-34408

CVE-2024-34408 affects Tencent’s Libpag up to version 4.3.51. The vulnerability is an integer overflow in DecodeStream::checkEndOfFile() within codec/utils/DecodeStream.cpp triggered by a crafted PAG file. Several connected sources describe the issue and indicate potential code execution; Red Hat...

CVE-2024-34447

CVE-2024-34447 is tied to the Bouncy Castle Crypto Package for Java. IBM’s security bulletin details an issue where, when endpoint identification is enabled in BCJSSE and an SSL socket is created without an explicit hostname (as with HttpsURLConnection), hostname verification could be performed a...

CVE-2024-30302

Adobe Acrobat Reader DC/Classic Continuous versions affected by CVE-2024-30302 contain a Use-After-Free vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact notes indicate memory disclosure with high confidentiali...

CVE-2024-30303

CVE-2024-30303 affects Adobe Acrobat Reader DC: versions 20.005.30539, 23.008.20470 and earlier are vulnerable to a Use-After-Free in AcroForm, enabling arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). Adobe’s APSB24-07 sec...

CVE-2024-30305

Adobe Acrobat Reader DC/Reader for Windows and Mac (versions 20.005.30539, 23.008.20470 and earlier) is affected by a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). ...

CVE-2024-30306

Adobe Acrobat Reader has an out-of-bounds read vulnerability (CVE-2024-30306) in parsing crafted files, potentially enabling code execution under the user’s account. Affected versions: 20.005.30539, 23.008.20470 and earlier. Exploitation requires user interaction (opening a malicious file). The p...

CVE-2024-25047

IBM Cognos Analytics is affected by CVE-2024-25047: injection attacks in application logging due to unsanitized user-supplied data. Affected versions are 11.2.0–11.2.4 and 12.0.0–12.0.2. Root cause is improper sanitization in logging code, enabling potential follow-on attacks. IBM recommends upgr...

CVE-2024-34394

CVE-2024-34394 affects libxmljs2. A type confusion occurs when parsing a specially crafted XML while invoking namespaces() on a grand-child node that refers to an entity (XmlNode::get_local_namespaces). Reported impact includes denial of service and remote code execution. Connected sources confir...

CVE-2024-34392

CVE-2024-34392 : The libxmljs library (Node.js bindings) is affected by a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which calls _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This can lead to denia...

CVE-2024-3897

CVE-2024-3897 affects the WordPress plugin Popup Box – Best WordPress Popup Plugin (ays-popup-box) up to version 4.3.6. The vulnerability arises from a missing capability check on the ays_pb_create_author AJAX action, allowing unauthenticated attackers to enumerate all registered emails. MITRE/AT...

CVE-2023-6731

CVE-2023-6731 affects the WP Show Posts plugin for WordPress. The issue is a missing capability check on multiple AJAX functions, present in all versions up to and including 1.1.5. This enables authenticated attackers with subscriber+ privileges to access data they should not be able to view, spe...

CVE-2024-4033

CVE-2024-4033 affects the All-in-One Video Gallery WordPress plugin. The vulnerability allows authenticated users with Contributor+ access to upload arbitrary files due to missing file type validation in aiovg_create_attachment_from_external_image_url, across all versions up to 3.6.4. The vulnera...

CVE-2024-2876

The CVE concerns the WordPress plugin Email Subscribers by Icegram Express . A SQL Injection flaw exists in the run() path of the IG_ES_Subscribers_Query class, affecting all versions up to 5.7.14, due to insufficient escaping and lack of proper SQL preparation. This allows unauthenticated attack...

CVE-2024-1415

CVE-2024-1415 affects the WordPress plugin Responsive Contact Form Builder & Lead Generation (lead-form-builder) up to version 1.8.9. Root cause: missing/incorrect nonce validation enables CSRF, allowing unauthenticated users to trigger actions (form deletion, lead signup, file upload) by trickin...

CVE-2024-4034

The CVE-2024-4034 entry concerns the Virtue WordPress theme. A Stored Cross-Site Scripting vulnerability exists in all versions up to and including 3.4.8 due to insufficient input sanitization and output escaping when the homepage’s latest posts feature is enabled. Exploitation requires authentic...

CVE-2024-2328

CVE-2024-2328 – Real Media Library: WordPress plugin Real Media Library (Lite) stores Cross‑Site Scripting via image title/alt text. Root cause: insufficient input sanitization and output escaping in image metadata. Affected: all versions up to and including 4.22.11. Impact: authenticated attacke...

CVE-2024-1797

CVE-2024-1797 concerns the WP ULike plugin for WordPress. The initial description states a SQL Injection via the status and id attributes of the wp_ulike_counter and wp_ulike shortcodes, affecting all versions up to 4.6.9, with authenticated attackers (contributor+ level) able to inject extra SQL...