PT-2024-3509 · Huawei · Huawei Matebook D16

Name of the Vulnerable Software and Affected Versions: Huawei Matebook D16 Model: CREM-WXX9, BIOS: v2.26 Description: The issue is related to insufficient validation of exceptional states in the UEFI BIOS firmware of Huawei personal computers. This can be exploited by a malicious OS attacker to...

PT-2024-3740 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue exists due to insufficient input validation in the LOV component of the Oracle Complex Maintenance, Repair, and Overhaul product, part of...

PT-2024-3531 · Oracle · Peoplesoft Enterprise Hcm Benefits Administration

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Benefits Administration version 9.2 Description: The issue is related to insufficient input validation in the Benefits Administration component. It allows a low-privileged attacker with logon access to the...

PT-2024-4897 · Oracle · Oracle Trade Management +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite component: Finance LOV versions 12.2.3 through 12.2.13 Description: A vulnerability in the Oracle Trade Management product allows an unauthenticated attacker with network access via HTTP to compromise Oracle Trade...

PT-2024-3742 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul, allowing an...

WordPress Plugin Premium Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

ECShop SQL Injection Vulnerability (CNVD-2024-26111)

ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall, source code free download experience, suitable for enterprise development and build mall. ECShop SQL injection vulnerability , the vulnerability stems from...

PT-2024-3114 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

PT-2024-3113 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

PT-2024-14534 · Unisoc (Shanghai) Technologies Co. +1 · T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a possible improper input validation in the SecurityCommand message after security has been activated. This could lead to remote...

CVE-2024-30322

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution (CVE-2024-30322) affects Foxit PDF Reader/Editor; the issue stems from not validating the existence of an object before performing operations on AcroForm objects, enabling code execution in the current process when a user opens a mali...

CVE-2024-30362

Foxit PDF Editor/Reader (Windows; Mac notes appear in related Nessus/OpenVAS listings) is affected by a Use-After-Free vulnerability in object handling within PDF processing (AcroForm, Doc objects). The flaw stems from not validating the existence of an object before performing operations on it, ...

CVE-2024-26673 netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTOIPV4,IPV6,INET. - Disallow layer 4 protocol with no ports, since destination port is a mandatory attribute for...

CVE-2023-51572

Voltronic Power ViewPower Pro is affected by CVE-2023-51572 due to an OS command injection in getMacAddressByIP. The flaw stems from insufficient validation of a user-supplied string before it is used to execute a system call, enabling remote code execution with SYSTEM privileges without authenti...

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of D...

SUSE CVE-2024-23263

A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from being...

CVE-2023-41972

In some rare cases, there is a password type validation missing in Revert Password check and for some features it could be disabled. Fixed Version: Win ZApp 4.3.0.121 and later...

CVE-2024-24539

FusionPBX before 5.2.0 does not validate a session...

Google Android Information Disclosure Vulnerability (CNVD-2024-24426)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that stems from improper input validation in the smpprocsecreq method of the smpact.cc file, which may result in an out-of-bounds read. An attacker can...