Archive
7 October 2024
Vulnerabilities first published on this day (UTC), newest first.
46 results · Clear filters · Feed
-
High 7.6
Cross-site Scripting (XSS) in Special:WikiDiscover when displaying wiki information in WikiDiscover
WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. Special:WikiDiscover is a special page that lists all wikis on the wiki farm. However, the special page does not make any effort to escape the wiki name or descript…
-
High 7.3
Stored Cross-site Scripting Vulnerability in Markdown Editor
InvenTree is an Open Source Inventory Management System. In affected versions of InvenTree it is possible for a registered user to store javascript in markdown notes fields, which are then displayed to other logged in users who visit the same page and execute…
-
High 7.2
Remote code execution via Log Poisoning in Cacti
Cacti is an open source performance and fault management framework. An admin user can create a device with a malicious hostname containing php code and repeat the installation process (completing only step 5 of the installation process is enough, no need to c…
-
High 7.3CVE-2024-43362 EPSS 39%
Stored Cross-site Scripting (XSS) when creating external links in Cacti
Cacti is an open source performance and fault management framework. The `fileurl` parameter is not properly sanitized when saving external links in `links.php` . Morever, the said fileurl is placed in some html code which is passed to the `print` function in …
-
High 7.5
Denial of service by the absence of restrictions on replies to posts in Discourse
Discourse is an open source platform for community discussion. A user can create a post with many replies, and then attempt to fetch them all at once. This can potentially reduce the availability of a Discourse instance. This problem has been patched in the l…
-
High 8.2
Bypass of email address validation via encoded email addresses in Discourse
Discourse is an open source platform for community discussion. A maliciously crafted email address could allow an attacker to bypass domain-based restrictions and gain access to private sites, categories and/or groups. This issue has been patched in the lates…
-
High 7.1
Unauthenticated Cross-Site-Scripting (XSS) in sample file in PHPSpreadsheet
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. One of the sample scripts in PhpSpreadsheet is susceptible to a cross-site scripting (XSS) vulnerability due to improper handling of input where a number is expected leading to fo…
-
High 7.7
Path traversal and Server-Side Request Forgery when opening XLSX files in PHPSpreadsheet
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links media from external URLs. When opening the XLSX file, PhpSpreadsheet retrieves the image size and type by readi…
-
High 7.5CVE-2024-45293 Scanner template
XML External Entity Reference (XXE) in PHPSpreadsheet's XLSX reader
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white-spaces. On servers that all…
-
High 7.0CVE-2024-31449 Public exploit
Lua library commands may lead to stack overflow and RCE in Redis
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in a…
-
High 7.0
Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access …
-
High 7.6
Authenticated RCE via Path Traversal
Authenticated RCE via Path Traversal
-
High 7.6
Authenticated RCE via Path Traversal
Authenticated RCE via Path Traversal
-
High 8.3
-
High 8.3
-
High 8.3
Missing Authentication - User & System Configuration
Missing Authentication - User & System Configuration
-
High 8.8
HP Hotkey Support – Escalation of Privilege
A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. HP is releasing mitigation for the potential vulnerability. Customers using HP Programmable Key are recommended to updat…
-
High 8.8CVE-2024-9570 Public exploit
D-Link DIR-619L B1 formEasySetTimezone buffer overflow
A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function formEasySetTimezone of the file /goform/formEasySetTimezone. The manipulation of the argument curTime leads to buffer overflow. The attack …
-
High 7.3
A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a bu…
-
High 7.3
A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a bu…
-
High 8.8
D-Link DIR-619L B1 formEasySetPassword buffer overflow
A vulnerability has been found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this vulnerability is the function formEasySetPassword of the file /goform/formEasySetPassword. The manipulation of the argument curTime leads to buffer overflow…
-
High 8.8
D-Link DIR-619L B1 formAdvNetwork buffer overflow
A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formAdvNetwork of the file /goform/formAdvNetwork. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch th…
-
High 7.0
Improper access control in Linux Workbooth Distro
Vulnerability in Distro Linux Workbooth v2.5 that allows to escalate privileges to the root user by manipulating the network configuration script.
-
High 8.8
D-Link DIR-619L B1 formAdvFirewall buffer overflow
A vulnerability, which was classified as critical, has been found in D-Link DIR-619L B1 2.06. This issue affects the function formAdvFirewall of the file /goform/formAdvFirewall. The manipulation of the argument curTime leads to buffer overflow. The attack ma…
-
High 8.8
D-Link DIR-619L B1 formDeviceReboot buffer overflow
A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. This vulnerability affects the function formDeviceReboot of the file /goform/formDeviceReboot. The manipulation of the argument next_page leads to buffer overflow. The attack can be …
-
High 7.8CVE-2024-43047 Exploited
Use After Free in DSP Service
Memory corruption while maintaining memory maps of HLOS memory.
KEV Oct 8, 2024 -
High 8.4CVE-2024-38399 Public exploit
Use After Free in Graphics
Memory corruption while processing user packets to generate page faults.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing probe response and assoc response frame.
-
High 8.2
Buffer Over-read in WLAN Host Communication
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing ESP IE from beacon/probe response frame.
-
High 7.5
Use After Free in WLAN Host
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.
-
High 8.4
Improper Input Validation in Camera
Memory corruption while taking snapshot when an offset variable is set by camera driver.
-
High 8.2
Buffer Over-read in WLAN Host Communication
Information disclosure while parsing the multiple MBSSID IEs from the beacon.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
-
High 7.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
-
High 7.8
Untrusted Pointer Dereference in DSP Service
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
-
High 7.6
WordPress Bit Form plugin <= 2.13.11 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.13.11.
-
High 7.5
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service w…
-
High 7.8
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …