CVE-2024-31031

CVE-2024-31031 affects libcoap 4.3.4 (coap_pdu.c) with undefined behavior caused by an unsigned integer overflow when processing a sequence of messages. Fedora advisories indicate patches exist for libcoap (e.g., 4.3.4a-2 in FC39/FC40); Nessus/OpenVAS entries reference a patch to fix CVE-2024-310...

CVE-2024-32299

CVE-2024-32299 affects Tenda FH1203 firmware (version 2.0.1.6). The vulnerability is a stack overflow in the fromWizardHandle function triggered via the PPW parameter. No exploitation details are provided in the sources, and the impact is described as a stack overflow (potentially arbitrary code ...

CVE-2024-30982

CVE-2024-30982 describes a SQL injection in the phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0, exploitable via the upid parameter in /view-user-detail.php to run arbitrary SQL. Reported impact includes potential data exposure/modification. Mitigation from PT-2024-23704 suggests di...

CVE-2024-31578

FFmpeg: CVE-2024-31578 affects FFmpeg n6.1.1 with a heap use-after-free in av_hwframe_ctx_init. Impact: high integrity risk; attack vector considered NETWORK, with no privileges required and no user interaction. Connected advisories indicate remediation in updated FFmpeg builds (e.g., Debian LTS ...

CVE-2024-32315

CVE-2024-32315 – Tenda FH1202 : Multiple sources confirm a stack/buffer overflow in the firmware via the adslPwd parameter of the formWanParameterSetting function, affecting Tenda FH1202 v1.2.0.14(408). Reported impacts include denial of service in several CNVD/CNNVD entries; other vendors list a...

CVE-2024-32163

CMSeasy 7.7.7.9 is reported vulnerable to code execution (Vuln: CMSeasy CMS). The available connected documents confirm the affected software/version and the general impact (ability to execute code). The exact root cause, vulnerable component/file, exploit details, and remediation status are not ...

CVE-2024-32290

CVE-2024-32290 concerns the Tenda W30E firmware. Multiple connected sources confirm a stack overflow vulnerability in the fromAddressNat function triggered by the page parameter, affecting at least firmware versions 1.0 and 1.0.1.25(633). The Red Hat and CNVD entries reiterate the issue with simi...

CVE-2024-32311

The CVE-2024-32311 entry describes a stack overflow vulnerability in Tenda FH1203 firmware version 2.0.1.6, triggered by the adslPwd parameter in the formWanParameterSetting function. The issue is documented across multiple sources (including Red Hat, CNVD, NVD, CVE records) as a buffer/stack ove...

CVE-2024-31583

CVE-2024-31583 affects PyTorch due to a use-after-free flaw in torch/csrc/jit/mobile/interpreter.cpp. Affected versions: PyTorch prior to 2.2.0; the issue enables denial of service when a victim opens crafted content. Exploitation details are not provided beyond the vulnerability description in t...

CVE-2024-32306

The CVE-2024-32306 entry affects Tenda AC10U v1.0 firmware v15.03.06.49, where a stack overflow is triggered via the PPW parameter in the fromWizardHandle function. The vulnerability is rooted in improper input handling in that function, leading to potential denial of service. Public exploitation...

CVE-2024-32291

CVE-2024-32291 affects Tenda W30E v1.0 firmware v1.0.1.25(633): the fromNatlimit function suffers a stack overflow triggered via the page parameter due to inadequate input length validation. This vulnerability can lead to a denial of service with high impact on availability (CVE metrics show NETW...

CVE-2024-32343

Boid CMS v2.1.0 has an XSS vulnerability in the Create Page, exploitable by injecting a crafted payload into the Content parameter. The issue is documented across multiple sources with no explicit exploitation details provided and a CVSS v3.1 base score of 6.1 (MEDIUM), requiring user interaction...

CVE-2024-32162

CMSeasy 7.7.7.9 is affected by CVE-2024-32162, a vulnerability enabling Arbitrary file deletion. Documented across NVD/Red Hat/CVEs and third-party advisories, the issue affects the CMSeasy content management system; exact root cause and vulnerable component are not detailed in the provided mater...

CVE-2024-32287

CVE-2024-32287 affects Tenda W30E firmware v1.0.1.25(633). Multiple sources describe a stack overflow vulnerability in the fromqossetting function triggered via the qos parameter. Red Hat and CNVD entries characterize it as a buffer/stack overflow with potential impact to availability (per CNVD) ...

CVE-2024-30988

The CVE-2024-30988 entry describes a Cross Site Scripting (XSS) vulnerability in phpgurukul Client Management System v1.1, specifically in the /search-invoices.php endpoint. The root cause is an XSS flaw in the search bar that can allow an attacker to execute arbitrary code and access sensitive i...

CVE-2024-30983

SQL Injection in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows arbitrary SQL via the compname parameter in /edit-computer-detail.php. Multiple sources (NVD, Red Hat, CVE lists, CNNVD, PT Security) confirm the vulnerable component and parameter. Impact details in sources ind...

CVE-2024-31582

FFmpeg CVE-2024-31582: a heap-buffer overflow in draw_block_rectangle (libavfilter/vf_codecview.c) affects FFmpeg n6.1, enabling undefined behavior or Denial of Service with crafted input. Connected sources corroborate the flaw and location. No remediation details or patch version are provided in...

CVE-2024-32161

CVE-2024-32161 affects jizhiCMS 2.5 with a file upload vulnerability. The available data identify the issue as a file upload flaw in jizhiCMS 2.5, but do not specify the vulnerable file, module, or root cause in exact technical terms. CVSS v3.1 metrics indicate a CRITICAL severity (9.8) with netw...

CVE-2024-31580

CVE-2024-31580 affects PyTorch prior to 2.2.0, due to a heap-based buffer overflow in /runtime/vararg_functions.cpp. A crafted input can cause a Denial of Service. The available connected documents indicate vulnerable PyTorch versions and a clear remediation: upgrade to PyTorch 2.2.0 or newer (or...

CVE-2024-32281

CVE-2024-32281 affects Tenda AC7V1.0 firmware 15.03.06.44, with a command injection vulnerability in formexeCommand (cmdinput parameter ), caused by inadequate input handling and failure to filter construct commands. Exploitation could enable arbitrary command execution with network access, low p...