Archive
1 April 2024
Vulnerabilities first published on this day (UTC), newest first.
34 results · Clear filters · Feed
-
High 7.8
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vul…
-
High 7.5
PDF-XChange Editor Updater Improper Certificate Validation Remote Code Execution Vulnerability
PDF-XChange Editor Updater Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is not required to…
-
High 8.8
Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability
Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific …
-
High 7.2CVE-2024-23118 EPSS 53%
Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability
Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The spe…
-
High 7.2CVE-2024-23117 EPSS 53%
Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability
Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The …
-
High 7.2CVE-2024-23116 EPSS 53%
Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability
Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fl…
-
High 7.2CVE-2024-23115 EPSS 67%
Centreon updateGroups SQL Injection Remote Code Execution Vulnerability
Centreon updateGroups SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw ex…
-
High 7.5
TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability
TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication …
-
High 8.8CVE-2024-0637 EPSS 72%
Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability
Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw…
-
High 7.5
Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability
Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication i…
-
High 8.8
Delta Electronics DIAEnergie SQL Injection
SQL injection vulnerability exists in GetDIAE_usListParameters.
-
High 8.4
Use After Free in Kernel
Memory corruption in Kernel while handling GPU operations.
-
High 8.4
Integer Overflow to Buffer Overflow in Graphics Windows
Memory corruption while allocating memory for graphics.
-
High 8.4
Use After Free in Kernel
Memory corruption when there is failed unmap operation in GPU.
-
High 7.3
Buffer Copy Without Checking Size of Input in Audio
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
-
High 7.5
Integer Overflow to Buffer Overflow in Automotive Telematics
Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.
-
High 7.5
Improper Input Validation in Automotive Telematics
Transient DOS while decoding message of size that exceeds the available system memory.
-
High 7.3
Improper Input Validation in Automotive Telematics
Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.
-
High 7.8
Buffer Over-read in Trusted Execution Environment
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
-
High 7.5
Incorrect Type Conversion or Cast in Multi-Mode Call Processor
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
-
High 7.5
Improper input validation in Multi-Mode Call Processor
Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.
-
High 7.5
Improper Input Validation in Multi-Mode Call Processor
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
-
High 8.4
Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications
Memory corruption while processing finish_sign command to pass a rsp buffer.
-
High 8.4
Buffer Copy Without Checking Size of Input in SPS Applications
Memory corruption in SPS Application while requesting for public key in sorter TA.
-
High 7.8
Local privilege escalation in Bitdefender Total Security (VA-11168)
A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a thi…
-
High 7.8
ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs The dreamcastcard->timer could schedule the spu_dma_work and the spu_dma_work could also arm the dreamcastcard->timer. When the sn…
-
High 8.4
In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of…
-
High 8.8
In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote e…
-
High 8.8
In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote cod…
-
High 8.8
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.
-
High 8.8
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.
-
High 8.8
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php.
-
High 8.8
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.
-
High 8.8
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.