CVE-2024-23533

CVE-2024-23533 describes an out-of-bounds read in Ivanti Avalanche’s WLAvalancheService, affecting versions prior to 6.4.3. An authenticated remote attacker could read sensitive information from memory under certain conditions. The linked documents confirm the vulnerable component and version bou...

CVE-2023-50007

FFmpeg vulnerability CVE-2023-50007 affects the av_samples_set_silence parameter handling in libavutil/samplefmt.c:260:9. Public mentions from multiple sources (Debian security advisory DSA-5985-1 and Astra Linux bulletin) confirm FFmpeg v.n6.1-3-g466799d4f5 is vulnerable and indicate remediation...

CVE-2023-51798

CVE-2023-51798 affects FFmpeg builds using v.N113007-g8d24a28d06, with a buffer overflow caused by a floating point exception (FPE) in the interpolate path of libavfilter/vf_minterpolate.c (line 1078:60). A local attacker could potentially execute arbitrary code via this FPE error. Documents cons...

CVE-2023-51797

CVE-2023-51797: FFmpeg contains a buffer overflow in libavfilter/avf_showwaves.c:722:24 (showwaves_filter_frame) that enables a local attacker to execute arbitrary code. Affected build shown as v.N113007-g8d24a28d06. CVSS 3.1: Local, High impact on confidentiality and integrity, no impact on avai...

CVE-2024-31547

Computer Laboratory Management System v1.0 is affected by a SQL Injection in the id parameter of /admin/item/view_item.php. The vulnerability arises in the application’s input handling for that endpoint, enabling an attacker to manipulate a SQL query and potentially exfiltrate data or impact inte...

openSUSE Security Advisory (SUSE-SU-2024:1322-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-49502

CVE-2023-49502 corresponds to a buffer overflow in FFmpeg (ff_bwdif_filter_intra_c in libavfilter/bwdifdsp.c:125:5) that could allow a local attacker to execute arbitrary code. The affected component is FFmpeg v.n6.1-3-g466799d4f5. Connected advisories confirm this vulnerability and indicate mult...

CVE-2023-50010

FFmpeg v.n6.1-3-g466799d4f5 contains a buffer over-read in ff_gradfun_blur_line_movdqa_sse2, exploitable via set_encoder_id in ffmpeg_enc.c (CVE-2023-50010). CVSS: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Impact is high across confidentiality, integrity and availability with local access and no user ...

CVE-2023-51796

CVE-2023-51796 affects FFmpeg (v.N113007-g8d24a28d06). The vulnerability is a buffer overflow in libavfilter/f_reverse.c:269:26, triggered via the function areverse_request_frame. The issue could allow a local attacker to execute arbitrary code . Reported impact per available data is limited to l...

CVE-2024-31546

CVE-2024-31546 affects Computer Laboratory Management System v1.0. The vulnerability is a SQL Injection in the /admin/damage/view_damage.php endpoint via the id parameter, caused by unsafe handling of input in a user-controlled query. The CVSS 3.1 metrics indicate a critical impact: HIGH confiden...

CVE-2024-31587

CVE-2024-31587 affects SecuSTATION Camera versions up to 2.5.5.3116-S50-SMA-B20160811A and earlier, enabling an unauthenticated attacker to download device configuration files via a crafted request. Affected component is the device configuration exposure (no details on code path provided). Impact...

CVE-2023-51791

CVE-2023-51791 is a local, heap-based buffer overflow in FFmpeg’s libavcodec/jpegxl_parser.c (gen_alias_map) that could enable arbitrary code execution on a vulnerable host. The described vulnerable build is FFmpeg with version string v.N113007-g8d24a28d06. Public sources classify the impact as h...

CVE-2024-32391

MacCMS v10, version 2024.1000.3000, contains a Cross Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload. The issue is described as XSS in the product and is labeled with a CVSS v3.1 base score of 7.3 (HIGH) with network attack vector, low at...

CVE-2024-31846

Affected product : Italtel Embrace 1.6.4 (web application). Vulnerability : improper access control; the web app does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impact : potential exposure of restricted resources to unauthenticated/unauthorized parties ...

CVE-2024-32409

CVE-2024-32409 affects SEMCMS v4.8. The supplied connected sources confirm a remote attacker can execute arbitrary code via a crafted script in SEMCMS, with the root cause described only as the crafted-script input affecting SEMCMS v4.8. The vulnerability is categorized as high-severity (CVSS v3....

CVE-2024-3742

CVE-2024-3742 affects Electrolink FM/DAB/TV Transmitters. Affected devices store credentials in clear-text (eg, controlloLogin.js/login.htm/mail.htm), enabling an attacker to access credentials and gain system access. Unauthenticated credential disclosure is supported by the NUCLEI template; impa...

CVE-2024-30107

Technical details about CVE-2024-30107 are not publicly provided in the supplied documents. No explicit affected versions, root cause, or fixes are disclosed here. Monitor for updates from the vendor and security feeds.

CVE-2024-32477

The CVE-2024-32477 vulnerability affects Deno versions prior to 1.42.2, caused by a race between ANSI escape sequences (e.g., ) and reading standard input. This allows an attacker to manipulate the permission prompt and bypass the permission policy via the PTY channel. Several connected sourc...

CVE-2024-29987

Microsoft Edge (Chromium-based) has a documented information disclosure vulnerability associated with CVE-2024-29987. Publicly reported details indicate the issue affects Edge’s Chromium-based browser and can enable an attacker to obtain sensitive information. Several connected sources reference ...

CVE-2024-29986

Summary: CVE-2024-29986 affects Microsoft Edge for Android (Chromium-based) and is categorized as an information disclosure vulnerability. The issue is disclosed in Edge for Android and can lead to the exposure of sensitive information, as described in multiple sources (CNVD/CNNVD/NVD) and corrob...