3 September 2024

12 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-8389

  Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that …

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Wolfi
  Sep 3, 2024
• Critical 9.8
  CVE-2024-8387

  Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Sep 3, 2024
• Critical 9.8
  CVE-2024-8385

  A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confus…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Sep 3, 2024
• Critical 9.8
  CVE-2024-8384

  The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi
  Sep 3, 2024
• Critical 9.8
  CVE-2024-8381 Public exploit

  A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Wolfi
  Sep 3, 2024
• Critical 9.1
  CVE-2024-45588

  Information Disclosure Vulnerability

  This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating paramete…

  Symphony Fintech XTS Web Trader
  Sep 3, 2024
• Critical 9.1
  CVE-2024-45587

  Unauthorized Modification Vulnerability

  This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating …

  Symphony Fintech XTS Web Trader
  Sep 3, 2024
• Critical 9.2
  CVE-2024-45586

  Account Take Over Vulnerability

  This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote attacker could exploit this vulnerability by manipulating p…

  Symphony Fintech XTS Web Trader XTS Mobile Trader
  Sep 3, 2024
• Critical 9.8
  CVE-2024-7261 EPSS 11%

  The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmwar…

  Zyxel WAC500 firmware WBE530 firmware NWA1123ACv3 firmware Network devices
  Sep 3, 2024
• Critical 9.8
  CVE-2024-44921

  SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?a…

  Sep 3, 2024
• Critical 9.8
  CVE-2024-44809

  A remote code execution (RCE) vulnerability exists in the Pi Camera project, version 1.0, maintained by RECANTHA. The i…

  Sep 3, 2024
• Critical 9.8
  CVE-2024-41433

  PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. Thi…

  Sep 3, 2024