CVE-2024-24335

The CVE-2024-24335 entry describes a heap buffer overflow in RT-Thread’s dfs_v2 romfs filesystem (RT-Thread RTOS) affecting version 5.0.2 and earlier. The vulnerability stems from insufficient validation of input data length in the dfs_v2 romfs file handling, enabling a overflow of the heap. Repo...

CVE-2023-45929

CVE-2023-45929 affects S-Lang 2.3.2, where a segmentation fault is triggered by fixup_tgetstr(). The CVE entry documents a likely fault in this function, with a CVSS 3.1 base score of 9.1 (CRITICAL) impacting confidentiality and availability. Exploitation details are not provided in the supplied ...

CVE-2024-25393

The CVE-2024-25393 entry concerns RT-Thread up to version 5.0.2, where a stack buffer overflow exists in net/at/src/at_server.c due to insufficient validation of input length. This vulnerability can enable remote attackers to execute arbitrary code or cause a denial of service. The CVSS score is ...

CVE-2024-25354

CVE-2024-25354 affects domain-suffix 1.0.8 (Node.js) with a RegEx Denial of Service in the parse function that can crash the application when given crafted input. Root cause: excessive backtracking in the regular expression. Impact: denial of service/crash; exploitation details are provided in pu...

CVE-2024-25391

CVE-2024-25391 affects RT-Thread RTOS up to version 5.0.2, with a stack-based buffer overflow in libc/posix/ipc/mqueue.c. The CVE description from multiple sources confirms the issue is a stack overflow in that file, reported as a local-attack surface with high impact (confidentiality/integrity/a...

CVE-2023-40289

CVE-2023-40289 affects Supermicro BMC/IPMI on X11SSM‑F, X11SAE‑F, and X11SSE‑F (firmware 1.66) where a flaw in argument handling enables a command injection that can elevate privileges to an administrator/root on the BMC. Red Hat/NVD and other sources corroborate a high‑impact, authenticated (adm...

CVE-2023-45919

CVE-2023-45919 refers to Mesa 23.0.4, which contains a buffer over-read in glXQueryServerString(). The entry notes this is disputed and does not detail exploit vectors. Public records in connected sources confirm remediation: SUSE/SUSE-SU-2025:02803-1 and related advisories indicate Mesa fixes in...

CVE-2024-25392

RT-Thread CVE-2024-25392: An out-of-bounds access exists in utilities/var_export/var_export.c up to version 5.0.2. The issue affects RT-Thread before a fixed release; exact patched version is not specified in the provided documents. Impact details in the sources indicate a local exploit surface w...

CVE-2024-25395

Summary: CVE-2024-25395 affects RT-Thread RTOS, specifically the utilities/rt-link/src/rtlink.c module, where a buffer overflow exists in versions up to and including 5.0.2. Affected software/component: RT-Thread (RTOS); vulnerable file: utilities/rt-link/src/rtlink.c. Root cause / vulnerability ...

CVE-2023-40286

CVE-2023-40286 affects Supermicro X11SSM-F, X11SAE-F, and X11SSE-F (version 1.66). The vulnerability is an XSS in the BMC IPMI web interface, arising from insufficient protection of the web page structure. This could allow an attacker to execute JavaScript in the context of an authenticated BMC u...

CVE-2024-25390

CVE-2024-25390 affects RT-Thread up to version 5.0.2, with a heap-based buffer overflow in the finsh/msh_file.c and finsh/msh.c components. The issue is described consistently across multiple sources (NVD, Red Hat, OSV, CNNVD, CVE listings) as a heap overflow in these FinSH-related sources, impac...

Fedora: Security Advisory (FEDORA-2024-fc2ae12c31)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-39804

CVE-2023-39804 corresponds to a GNU tar issue where mishandled extension attributes in a PAX archive can crash an application via xheader.c. The connected IBM bulletin maps this CVE to IBM API Connect onPrem v12 (12.1.0.0) and lists remediation by upgrading to v12.1.0.1. The IBM advisory presents...

CVE-2024-24334

RT-Thread suffers a heap buffer overflow in dfs_v2 dfs_file (through version 5.0.2). The issue arises from improper validation of input data length in the dfs_v2/dfs_file path, enabling memory corruption that can lead to code execution or a denial of service. Affected software: RT-Thread RTOS; vu...

CVE-2023-46048

CVE-2023-46048 affects Tex Live 944e257, with a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. The CVSSv3.1 base score is 6.2 (Local, No privileges required, No user interaction, Availability impact High). Some sources note the issue is disputed and should be categorized as a usabili...

CVE-2024-2930

CVE-2024-2930 affects SourceCodester Music Gallery Site 1.0. The vulnerability exists in the file classes/Master.php?f=save_music and leads to unrestricted, remote file upload. Exploitation details are publicly disclosed. No fixed version is provided in the documents; remediation guidance in conn...

CVE-2024-25138

The CVE-2024-25138 entry affects AutomationDirect C-MORE EA9 HMI, where credentials are stored in plaintext on the device. The vulnerability stems from plaintext storage of passwords in the EA9 HMI platform, enabling exposure of authentication data. CISA/ICS advisory notes potential remote exploi...

CVE-2024-2927

CVE-2024-2927 affects code-projects Mobile Shop 1.0, specifically the Login Page’s Details.php. The vulnerability is a SQL injection triggered by manipulating the id parameter, with remote-exploitability and a critical impact profile per the sources. Multiple advisories (NVD, Red Hat CVE, CVE lis...

CVE-2024-2917

CVE-2024-2917 affects Campcodes House Rental Management System 1.0. The vulnerability is a file inclusion in index.php caused by manipulation of the page parameter, allowing remote exploitation. Multiple sources confirm the issue and that the exploit has been disclosed publicly. The root cause is...

CVE-2023-50960

IBM QRadar SIEM is vulnerable to CVE-2023-50960, a stored cross-site scripting flaw in the Web UI. The IBM bulletin specifies affected product: IBM QRadar SIEM 7.5.0 UP7, with fix in 7.5.0 UP8; exploitation details are not provided beyond the stored XSS description, and the impact is potential cr...