CVE-2024-8896

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8896

CVE-2024-8896 affects Autodesk AutoCAD via a vulnerability in acdb25.dll when parsing malicious DXF files. Root cause: accessing an uninitialized variable in memory, enabling arbitrary code execution or crashes in the current process. Documented impacts include crashing and potential data leakage...

CVE-2024-8896 Autodesk AutoCAD DXF File Parsing Unitialized Variable Code Execution Vulnerability

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

PT-2024-31541 · Fetch +1 · Fetch +1

Name of the Vulnerable Software and Affected Versions: fetch versions affected versions not specified Description: The issue arises from the fetch3 library's use of environment variables to pass information, including the revocation file pathname. However, the environment variable name used by...

CVE-2024-47827

A flaw was found in Argo Workflows. Due to a race condition in a global variable, the Argo Workflows controller can crash on command by any user with access to execute a workflow, which can lead to a denial of service...

CVE-2024-47827

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to crash on-command by any user with access to execute a workflow. This vulnerabili...

CVE-2024-47827

CVE-2024-47827 affects Argo Workflows (controller) where a race condition in a global variable in the 3.6.0-rc1 release can cause the controller to crash when a user with workflow execution access triggers a run. The issue is fixed in 3.6.0-rc2. Affected product: Argo Workflows (Kubernetes). Root...

CVE-2024-47827 Argo Workflows Controller: Denial of Service via malicious daemon Workflows

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to a race condition in a global variable in 3.6.0-rc1, the argo workflows controller can be made to crash on-command by any user with access to execute a workflow. This vulnerabili...

Argo Workflows security vulnerabilities

Argo Workflows is an open source container-native workflow engine for Kubernetes from the Argo project. A security vulnerability exists in Argo Workflows version 3.6.0-rc1, which stems from a race condition in a global variable that allows any user authorized to execute workflows to crash the arg...

pfSense Code Execution

The vulnerability of the $pconfig variable in the interfacesgroups Edit.php file of the software network interface layer based on the FreeBSD Netgate pfSense operating system is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a remote...

GHSA-H99M-6755-RGWC Rancher Remote Code Execution via Cluster/Node Drivers

Impact A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself. In production environments, further privilege escalation is possible based on living off the land within the Rancher...

CVE-2024-47017

CVE-2024-47017 affects the ufshc_scsi_cmd function in ufs.c, with a stack variable use-after-free leading to local escalation of privilege. The vulnerability description across Red Hat, NVD, CVE lists, and OSV entries consistently state that no further user interaction is required, and exploitati...

PT-2024-35530

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel, related to an uninitialized variable in the decode getfattr attrs function. The issue is triggered when calling decode attr...

[slackware-security] php81

New php81 packages are available for Slackware 15.0 to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/php81/php81-8.1.30-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues: Bypass of CVE-2024-4577, Parameter Injection Vulnerability...

PT-2024-35521

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when more than 255 colocated APs exist for the set of all APs found during 2.4/5 GHz scanning, causing the 6 GHz scan construction to loop forever due to the loop variab...

PT-2024-34051

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: The issue is related to the xfs file system in the Linux kernel. Specifically, the problem occurs in the xfs filestream pick ag function when it fails to find a suitable allocation group AG a...

asix Component DoS

The vulnerability of the asix component in the Linux operating system’s kernel is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux nci_rx_work Heap Buffer Overflow DoS

The vulnerability of the ncirxwork function in the net/nfc/nci/core.c file of the Linux operating system’s kernel is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected...

SIPLUS TIM DoS

The vulnerability of web-servers of microprogramming software for SIMATIC CP, SIMATIC HMI, SIMATIC IPC, and SIMATIC WinCC Runtime Advanced DiagBase, as well as SIPLUS TIM, is related to errors in variable name assignments. Exploiting this vulnerability can allow attackers to cause system failures...

CVE-2024-46538

A cross-site scripting XSS vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at interfacesgroupsedit.php...