CVE-2024-5304

CVE-2024-5304 affects Kofax Power PDF and is described as a TGA file parsing out-of-bounds write that enables remote code execution. The root cause is insufficient validation of user-supplied data during TGA parsing, which can write past the end of an allocated buffer and allows code execution in...

CVE-2024-5302

Kofax Power PDF is affected by a PDF parsing vulnerability that allows out-of-bounds writes, enabling remote code execution. The issue stems from improper validation of user-supplied data during PDF parsing, allowing a write past the end of an allocated buffer. Exploitation requires user interact...

CVE-2024-3504

CVE-2024-3504 affects lunary-ai/lunary up to version 1.2.2. The root cause is improper access control that allows an admin to elevate any organization user to the owner role, enabling the elevated user to delete projects within the organization. The issue is mitigated by upgrading to version 1.2....

CVE-2024-1879

CVE-2024-1879 affects significant-gravitas/autogpt (v0.5.0). Root cause: unprotected API endpoint that receives instructions, enabling CSRF to bypass protections and allow an attacker to induce a user in the local network to issue crafted requests that can lead to remote command execution. Compou...

CVE-2024-30368

CVE-2024-30368 affects A10 Thunder ADC (CsrRequestView). The flaw is due to improper validation of a user-supplied string before a system-call, allowing remote code execution in the a10user context. Authentication is required to exploit. CVSSv3.1 base score 8.8 (HIGH) with NETWORK attack vector, ...

CVE-2024-5509

CVE-2024-5509 concerns Luxion KeyShot: a flaw in BIP file parsing enables an attacker to load a library from an unsecured location, leading to remote code execution . The vulnerability arises from an uncontrolled search path element, allowing code execution in the context of the current process. ...

CVE-2024-5507

CVE-2024-5507 (Luxion KeyShot Viewer) : A stack-based buffer overflow in the parsing of KSP files can enable remote code execution in affected KeyShot Viewer installations. The flaw arises from insufficient validation of the length of user-supplied data prior to copying it to a stack-based buffer...

CVE-2024-5268

CVE-2024-5268 – Sonos Era 100 SMB2 Handling : The vulnerability affects Sonos Era 100 devices via the SMB2 message handling path, where insufficient validation of user data can cause a read past the end of an allocated buffer, enabling information disclosure for network-adjacent attackers. Authen...

CVE-2024-5267

CVE-2024-5267 describes a vulnerability in Sonos Era 100 where the SMB2 message handling allows an out-of-bounds write that can execute code with root privileges. The flaw comes from inadequate validation of user-supplied data, enabling a network-adjacent attacker (no authentication required) to ...

CVE-2024-5505

CVE-2024-5505 concerns the NETGEAR ProSAFE Network Management System, where the UpLoadServlet contains a directory traversal flaw that lacks proper validation of a user-supplied path in file operations. This leads to remote code execution with SYSTEM privileges. Exploitation is described as requi...

CVE-2024-30375

Summary (CVE-2024-30375): Luxion KeyShot Viewer is affected by a use-after-free in KSP file parsing that can lead to remote code execution. The vulnerability stems from not validating the existence of an object before performing operations, allowing an attacker to execute code in the context of t...

CVE-2024-30374

The CVE-2024-30374 entry concerns Luxion KeyShot Viewer. Affected component: KSP file parsing in the viewer, with an out-of-bounds write due to inadequate validation of user-supplied data. Impact: remote code execution by an attacker who entices a target to visit a malicious page or open a malici...

CVE-2024-3033

The CVE-2024-3033 issue affects mintplex-labs/anything-llm, specifically the "/api/v/" endpoint and its sub-routes. It is described as an improper authorization vulnerability that allows unauthenticated users to perform destructive actions on the VectorDB, including resetting the database and del...

CVE-2024-36745

CVE-2024-36745 affects OneFlow-Inc Oneflow v0.9.1. The issue allows an attacker to cause a Denial of Service by inputting a negative value into the oneflow.index_select parameter. CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, no privileges required, user interaction NONE. Multiple source...

CVE-2024-35178

CVE-2024-35178 affects Jupyter Server on Windows, where unauthenticated attackers can leak the NTLMv2 password hash of the Windows user running the server. This can enable cracking the hash to gain access to the host or other networked systems, or allow NTLM relay-style access to additional machi...

CVE-2024-36106

Affected product: Argo CD (GitOps for Kubernetes). Vulnerability: Authenticated users may enumerate clusters by name via error messages and, if cluster names are known, enumerate project-scoped cluster names as well. Root cause / status: Information disclosure through verbose error messages. Impa...

CVE-2024-36779

CVE-2024-36779 affects Sourcecodester Stock Management System v1.0 . The vulnerability is an SQL Injection via the file editCategories.php , caused by improper input handling. The CVSS 3.1 metrics indicate a CRITICAL impact with C/H/I/A = High and a network attack vector without user interaction....

CVE-2024-5658

The CVE-2024-5658 entry affects the CraftCMS plugin “Two-Factor Authentication” (versions up to 3.3.3). The root cause is that TOTP tokens can be reused within their validity period, which is described as an improper authentication vulnerability that may allow bypassing 2FA. Practical impact is l...

CVE-2024-5657

CVE-2024-5657 affects CraftCMS plugin Two-Factor Authentication (versions 3.3.1–3.3.3). After submitting a valid TOTP, the plugin discloses the password hash of the currently authenticated user in server responses. Root cause: improper handling/exposure of password hashes within normal responses....

CVE-2024-5329

CVE-2024-5329 affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress. The vulnerability is a blind SQL Injection in the data[addonID] parameter present in all versions up to 1.5.109, caused by insufficient escaping and lack of proper preparation in the SQL query....