16955 matches found
tecnickcom/tc-lib-pdf-font mishandles fonts
An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...
BELL-CVE-2024-56433
Bulletin has no description...
PT-2024-36982 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-00982-gf2a4f1682d07 Description: The issue is related to the vmemmap page table code in the Linux kernel for RV64 with SPARSEMEM VMEMMAP. The pmd allocation does not use the generic mechanism, resulting i...
CVE-2024-39025
Incorrect access control in the /users endpoint of Cpacker MemGPT v0.3.17 allows attackers to access sensitive data...
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises from buffer overflows in the queue, allowing an attacker to execute arbitrary code.
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises due to an overflow in the buffer area. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...
CVE-2024-45805 OpenCTI leaks support information due to inadequate access control
OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information SETTINGSSUPPORT. This is due to inadequate access control for support information...
CVE-2024-45600 Fields GLPI plugin has an Authenticated SQL Injection
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when the plugin is active. The vulnerability is fixed in 1.21.13...
CVE-2024-56510 Marp Core allows XSS by improper neutralization of HTML sanitization
@marp-team/marp-core is the core for Marp, which is the ecosystem to write your presentation with plain Markdown. Marp Core from v3.0.2 to v3.9.0 and v4.0.0, are vulnerable to cross-site scripting XSS due to improper neutralization of HTML sanitization. Marp Core v3.9.1 and v4.0.1 have been patch...
CVE-2024-12959
CVE-2024-12959 affects the open-source 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is in the file /update_personal_details.php, where manipulating the query parameter q enables SQL injection. Exploitation is possible remotely, and the exploit has been disclosed publicly. ...
Honor MagicOS 安全漏洞
Honor MagicOS is a mobile device operating system from Chinese company Honor Honor. A security vulnerability exists in Honor MagicOS version 8.0.1.112, which stems from the presence of a privilege assignment error and can be successfully exploited to cause a device service exception...
CVE-2024-52535
Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link symlink attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability,...
BELL-CVE-2024-53161
Bulletin has no description...
BELL-CVE-2024-53160
Bulletin has no description...
BELL-CVE-2024-53155
Bulletin has no description...
BELL-CVE-2024-53154
Bulletin has no description...
BELL-CVE-2024-53147
Bulletin has no description...
BELL-CVE-2024-40896
Bulletin has no description...
BELL-CVE-2024-53156
Bulletin has no description...