ZERO-DAY 2024  2025  2024  2023 


ZDI ID

ZDI CAN

AFFECTED VENDOR(S)

CVE

 

ZDI-24-1741

ZDI-CAN-26065

WSO2

CVE-2024-7074

WSO2 API Manager SynapseArtifactUploaderAdmin Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-1740

ZDI-CAN-23650

WSO2

CVE-2024-6914

WSO2 API Manager Exposed Dangerous Function Authentication Bypass Vulnerability

ZDI-24-1739

ZDI-CAN-25408

Foxit

CVE-2024-12753

Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability

ZDI-24-1738

ZDI-CAN-25345

Foxit

CVE-2024-12752

Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1737

ZDI-CAN-25344

Foxit

CVE-2024-12751

Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1736

ZDI-CAN-23371

Paessler

CVE-2024-12833

(0Day) Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerability

ZDI-24-1735

ZDI-CAN-24977

Ashlar-Vellum

CVE-2024-13051

(0Day) Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1734

ZDI-CAN-24976

Ashlar-Vellum

CVE-2024-13050

(0Day) Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1733

ZDI-CAN-24847

Ashlar-Vellum

CVE-2024-13049

(0Day) Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-1732

ZDI-CAN-24844

Ashlar-Vellum

CVE-2024-13048

(0Day) Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1731

ZDI-CAN-24843

Ashlar-Vellum

CVE-2024-13047

(0Day) Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-1730

ZDI-CAN-24867

Ashlar-Vellum

CVE-2024-13046

(0Day) Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1729

ZDI-CAN-24848

Ashlar-Vellum

CVE-2024-13045

(0Day) Ashlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1728

ZDI-CAN-24870

Ashlar-Vellum

CVE-2024-13044

(0Day) Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1727

ZDI-CAN-23478

Panda Security

CVE-2024-13043

(0Day) Panda Security Dome Link Following Local Privilege Escalation Vulnerability

ZDI-24-1726

ZDI-CAN-25738

Linux

CVE-2024-50285

Linux Kernel ksmbd TCP Connection Memory Exhaustion Denial-of-Service Vulnerability

ZDI-24-1725

ZDI-CAN-22346

Webmin

CVE-2024-12828

Webmin CGI Command Injection Remote Code Execution Vulnerability

ZDI-24-1724

ZDI-CAN-22450

Delta Electronics

CVE-2024-12836

(0Day) Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-1723

ZDI-CAN-22415

Delta Electronics

CVE-2024-12835

(0Day) Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1722

ZDI-CAN-22414

Delta Electronics

CVE-2024-12834

(0Day) Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-1721

ZDI-CAN-22331

Delta Electronics

CVE-2024-12677

Delta Electronics DTM Soft BIN File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1720

ZDI-CAN-24324

Arista

CVE-2024-12831

(0Day) Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability

ZDI-24-1719

ZDI-CAN-24325

Arista

CVE-2024-12832

(0Day) Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability

ZDI-24-1718

ZDI-CAN-24019

Arista

CVE-2024-12830

(0Day) Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1717

ZDI-CAN-24015

Arista

CVE-2024-12829

(0Day) Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability

ZDI-24-1716

ZDI-CAN-24545

Rockwell Automation

CVE-2024-11364

Rockwell Automation Arena Simulation DOE File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-1715

ZDI-CAN-24539

Rockwell Automation

CVE-2024-11157

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1714

ZDI-CAN-24158

Rockwell Automation

CVE-2024-12175

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1713

ZDI-CAN-24614

Rockwell Automation

CVE-2024-11364

(0Day) Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1712

ZDI-CAN-24941

Tibbo

CVE-2024-12700

Tibbo Aggregate Network Manager UploaderTempFileController Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-1711

ZDI-CAN-23940

AnyDesk

CVE-2024-12754

AnyDesk Link Following Information Disclosure Vulnerability

ZDI-24-1710

ZDI-CAN-25850

Autodesk

CVE-2024-12200

Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1709

ZDI-CAN-25881

Autodesk

CVE-2024-12198

Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1708

ZDI-CAN-25880

Autodesk

CVE-2024-12197

Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1707

ZDI-CAN-25878

Autodesk

CVE-2024-12179

Autodesk Navisworks Freedom DWFX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1706

ZDI-CAN-25879

Autodesk

CVE-2024-12194

Autodesk Navisworks Freedom DWFX File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1705

ZDI-CAN-25868

Autodesk

CVE-2024-12192

Autodesk Navisworks Freedom DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1704

ZDI-CAN-25867

Autodesk

CVE-2024-12191

Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1703

ZDI-CAN-25866

Autodesk

CVE-2024-12178

Autodesk Navisworks Freedom DWFX File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1702

ZDI-CAN-25967

Autodesk

CVE-2024-12671

Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1701

ZDI-CAN-25965

Autodesk

CVE-2024-12670

Autodesk Navisworks Freedom DWF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1700

ZDI-CAN-25966

Autodesk

CVE-2024-12669

Autodesk Navisworks Freedom DWFX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1699

ZDI-CAN-25691

Autodesk

CVE-2024-11422

Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1698

ZDI-CAN-23999

libarchive

CVE-2024-26256

libarchive run_filters Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1697

ZDI-CAN-23994

XWiki.org

CVE-2025-24893

XWiki.org XWiki SolrSearchMacros text Command Injection Remote Code Execution Vulnerability

ZDI-24-1696

ZDI-CAN-23729

libarchive

CVE-2024-20697

libarchive RAR File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-24-1695

ZDI-CAN-24375

Ivanti

CVE-2024-37373

Ivanti Avalanche FileStoreConfig Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-1694

ZDI-CAN-25733

Microsoft

 

Microsoft PC Manager MSPCManagerService Link Following Local Privilege Escalation Vulnerability

ZDI-24-1693

ZDI-CAN-25066

Dell

CVE-2024-47484

Dell Avamar Web Restore Login Action SQL Injection Information Disclosure Vulnerability

ZDI-24-1692

ZDI-CAN-25068

Dell

CVE-2024-47977

Dell Avamar Fitness Analyzer API SQL Injection Information Disclosure Vulnerability

ZDI-24-1691

ZDI-CAN-25067

Dell

CVE-2024-52538

Dell Avamar Fitness Analyzer API SQL Injection Information Disclosure Vulnerability

ZDI-24-1690

ZDI-CAN-25065

Dell

CVE-2024-47977

Dell Avamar Fitness Analyzer API SQL Injection Information Disclosure Vulnerability

ZDI-24-1689

ZDI-CAN-25064

Dell

CVE-2024-47977

Dell Avamar Fitness Analyzer API SQL Injection Information Disclosure Vulnerability

ZDI-24-1688

ZDI-CAN-25040

Linux

 

Linux Kernel ksmbd PreviousSessionId Race Condition Remote Code Execution Vulnerability

ZDI-24-1687

ZDI-CAN-24647

Progress Software

CVE-2024-46908

Progress Software WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability

ZDI-24-1686

ZDI-CAN-24644

Progress Software

CVE-2024-46907

Progress Software WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability

ZDI-24-1685

ZDI-CAN-24634

Progress Software

CVE-2024-46905

Progress Software WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability

ZDI-24-1684

ZDI-CAN-24638

Progress Software

CVE-2024-46906

Progress Software WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability

ZDI-24-1683

ZDI-CAN-25359

Wacom

CVE-2024-12552

Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability

ZDI-24-1682

ZDI-CAN-25394

GeoVision

CVE-2024-12553

GeoVision GV-ASManager Missing Authorization Information Disclosure Vulnerability

ZDI-24-1681

ZDI-CAN-25560

Tungsten Automation

CVE-2024-12547

Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1680

ZDI-CAN-25564

Tungsten Automation

CVE-2024-12548

Tungsten Automation Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability

ZDI-24-1679

ZDI-CAN-25565

Tungsten Automation

CVE-2024-12549

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1678

ZDI-CAN-25566

Tungsten Automation

CVE-2024-12550

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1677

ZDI-CAN-25567

Tungsten Automation

CVE-2024-12551

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1676

ZDI-CAN-25135

ManageEngine

CVE-2024-52323

ManageEngine Analytics Plus getOAToken Exposed Dangerous Method Privilege Escalation Vulnerability

ZDI-24-1675

ZDI-CAN-24774

AutomationDirect

CVE-2024-11611

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1674

ZDI-CAN-24773

AutomationDirect

CVE-2024-11610

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1673

ZDI-CAN-24772

AutomationDirect

CVE-2024-11609

AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1672

ZDI-CAN-24331

GFI

CVE-2024-11949

GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1671

ZDI-CAN-24041

GFI

CVE-2024-11948

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

ZDI-24-1670

ZDI-CAN-24029

GFI

CVE-2024-11947

GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1669

ZDI-CAN-24334

Veritas

CVE-2024-53909

Veritas Enterprise Vault MonitoringMiddleTier Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1668

ZDI-CAN-24336

Veritas

CVE-2024-53910

Veritas Enterprise Vault Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1667

ZDI-CAN-24339

Veritas

CVE-2024-53911

Veritas Enterprise Vault Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1666

ZDI-CAN-24343

Veritas

CVE-2024-53913

Veritas Enterprise Vault Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1665

ZDI-CAN-24344

Veritas

CVE-2024-53914

Veritas Enterprise Vault Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1664

ZDI-CAN-24341

Veritas

CVE-2024-53912

Veritas Enterprise Vault Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1663

ZDI-CAN-24405

Veritas

CVE-2024-53915

Veritas Enterprise Vault Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1662

ZDI-CAN-24695

Veritas

CVE-2024-52941

Veritas Enterprise Vault MobileHTMLView Cross-Site Scripting Vulnerability

ZDI-24-1661

ZDI-CAN-24696

Veritas

CVE-2024-52942

Veritas Enterprise Vault HTMLView Cross-Site Scripting Vulnerability

ZDI-24-1660

ZDI-CAN-24697

Veritas

CVE-2024-52943

Veritas Enterprise Vault HTMLView Cross-Site Scripting Vulnerability

ZDI-24-1659

ZDI-CAN-24698

Veritas

CVE-2024-52944

Veritas Enterprise Vault HTMLView Cross-Site Scripting Vulnerability

ZDI-24-1658

ZDI-CAN-25361

Microsoft

CVE-2024-49041

Microsoft Edge File Extension Spoofing Remote Code Execution Vulnerability

ZDI-24-1657

ZDI-CAN-24583

Microsoft

CVE-2024-49082

Microsoft Windows Directory Traversal Vulnerability

ZDI-24-1656

ZDI-CAN-25292

Delta Electronics

CVE-2024-47964

Delta Electronics CNCSoft-G2 DPAX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1655

ZDI-CAN-24540

Rockwell Automation

CVE-2024-11156

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1654

ZDI-CAN-24139

Rockwell Automation

CVE-2024-11156

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1653

ZDI-CAN-24544

Rockwell Automation

CVE-2024-11155

Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1652

ZDI-CAN-24542

Rockwell Automation

CVE-2024-11156

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1651

ZDI-CAN-24541

Rockwell Automation

CVE-2024-12130

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1650

ZDI-CAN-24137

Rockwell Automation

CVE-2024-11158

Rockwell Automation Arena Simulation DOE File Parsing Use of Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-1649

ZDI-CAN-24115

Rockwell Automation

CVE-2024-11156

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1648

ZDI-CAN-24547

Linux

 

Linux Kernel Bluetooth HCI Request Race Condition Local Privilege Escalation Vulnerability

ZDI-24-1647

ZDI-CAN-25398

BlueZ

CVE-2024-8805

BlueZ Classic HID Missing Authentication Remote Code Execution Vulnerability

ZDI-24-1646

ZDI-CAN-24329

Epic Games

CVE-2024-11872

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability

ZDI-24-1645

ZDI-CAN-24975

Progress Software

CVE-2024-46909

Progress Software WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1644

ZDI-CAN-25668

iXsystems

CVE-2024-11946

(Pwn2Own) iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability

ZDI-24-1643

ZDI-CAN-25626

iXsystems

CVE-2024-11944

(Pwn2Own) iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1642

ZDI-CAN-24348

Linux

CVE-2024-42070

Linux Kernel nftables Type Confusion Information Disclosure Vulnerability

ZDI-24-1641

ZDI-CAN-21847

Intel

CVE-2023-49797

Intel Computing Improvement Program PyInstaller Local Privilege Escalation Vulnerability

ZDI-24-1640

ZDI-CAN-22913

XnSoft

CVE-2024-11950

XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability

ZDI-24-1639

ZDI-CAN-25161

Hewlett Packard Enterprise

CVE-2024-53676

Hewlett Packard Enterprise Insight Remote Support processAtatchmentDataStream Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1638

ZDI-CAN-24814

Hewlett Packard Enterprise

CVE-2024-53675

Hewlett Packard Enterprise Insight Remote Support validateAgainstXSD XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-1637

ZDI-CAN-24813

Hewlett Packard Enterprise

CVE-2024-53674

Hewlett Packard Enterprise Insight Remote Support getDocumentRootElement XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-1636

ZDI-CAN-24812

Hewlett Packard Enterprise

CVE-2024-53673

Hewlett Packard Enterprise Insight Remote Support DESTA Service Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1635

ZDI-CAN-24811

Hewlett Packard Enterprise

CVE-2024-11622

Hewlett Packard Enterprise Insight Remote Support setInputStream XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-1634

ZDI-CAN-24694

Hewlett Packard Enterprise

CVE-2024-51770

Hewlett Packard Enterprise AutoPass License Server XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-1633

ZDI-CAN-24693

Hewlett Packard Enterprise

CVE-2024-51769

Hewlett Packard Enterprise AutoPass License Server SQL Injection Information Disclosure Vulnerability

ZDI-24-1632

ZDI-CAN-24692

Hewlett Packard Enterprise

CVE-2024-51768

Hewlett Packard Enterprise AutoPass License Server hsqldb Remote Code Execution Vulnerability

ZDI-24-1631

ZDI-CAN-24691

Hewlett Packard Enterprise

CVE-2024-51767

Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability

ZDI-24-1630

ZDI-CAN-24548

Fuji Electric

CVE-2024-11933

(0Day) Fuji Electric Monitouch V-SFT X1 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1629

ZDI-CAN-24771

Fuji Electric

CVE-2024-11803

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1628

ZDI-CAN-24770

Fuji Electric

CVE-2024-11802

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1627

ZDI-CAN-24769

Fuji Electric

CVE-2024-11801

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1626

ZDI-CAN-24768

Fuji Electric

CVE-2024-11800

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1625

ZDI-CAN-24664

Fuji Electric

CVE-2024-11799

(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1624

ZDI-CAN-24663

Fuji Electric

CVE-2024-11798

(0Day) Fuji Electric Monitouch V-SFT X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1623

ZDI-CAN-24662

Fuji Electric

CVE-2024-11797

(0Day) Fuji Electric Monitouch V-SFT V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1622

ZDI-CAN-24506

Fuji Electric

CVE-2024-11796

(0Day) Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1621

ZDI-CAN-24505

Fuji Electric

CVE-2024-11795

(0Day) Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1620

ZDI-CAN-24504

Fuji Electric

CVE-2024-11794

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1619

ZDI-CAN-24503

Fuji Electric

CVE-2024-11793

(0Day) Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1618

ZDI-CAN-24502

Fuji Electric

CVE-2024-11792

(0Day) Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1617

ZDI-CAN-24450

Fuji Electric

CVE-2024-11791

(0Day) Fuji Electric Monitouch V-SFT V8C File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1616

ZDI-CAN-24449

Fuji Electric

CVE-2024-11790

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1615

ZDI-CAN-24448

Fuji Electric

CVE-2024-11789

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1614

ZDI-CAN-24413

Fuji Electric

CVE-2024-11787

(0Day) Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1613

ZDI-CAN-23927

Intel

CVE-2024-36488

Intel Driver & Support Assistant Log Folder Link Following Local Privilege Escalation Vulnerability

ZDI-24-1612

ZDI-CAN-23826

Luxion

CVE-2024-11581

Luxion KeyShot JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1611

ZDI-CAN-23700

Luxion

CVE-2024-11580

Luxion KeyShot ABC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1610

ZDI-CAN-23697

Luxion

CVE-2024-11579

Luxion KeyShot OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1609

ZDI-CAN-23693

Luxion

CVE-2024-11578

Luxion KeyShot 3DS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1608

ZDI-CAN-23685

Luxion

CVE-2024-11577

Luxion KeyShot SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1607

ZDI-CAN-23681

Luxion

CVE-2024-11576

Luxion KeyShot 3DS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1606

ZDI-CAN-24307

7-Zip

CVE-2024-11612

7-Zip Qcow Handler Infinite Loop Denial-of-Service Vulnerability

ZDI-24-1605

ZDI-CAN-24608

Adobe

CVE-2024-49529

Adobe InDesign JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1604

ZDI-CAN-22177

IrfanView

CVE-2024-11507

IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-1603

ZDI-CAN-22184

IrfanView

CVE-2024-11508

IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-1602

ZDI-CAN-22185

IrfanView

CVE-2024-11509

IrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1601

ZDI-CAN-23971

IrfanView

CVE-2024-11513

IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1600

ZDI-CAN-24011

IrfanView

CVE-2024-11516

IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1599

ZDI-CAN-23975

IrfanView

CVE-2024-11514

IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1598

ZDI-CAN-24010

IrfanView

CVE-2024-11515

IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1597

ZDI-CAN-24118

IrfanView

CVE-2024-11517

IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1596

ZDI-CAN-24444

IrfanView

CVE-2024-11518

IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1595

ZDI-CAN-24445

IrfanView

CVE-2024-11519

IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1594

ZDI-CAN-22169

IrfanView

CVE-2024-11506

IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1593

ZDI-CAN-24598

IrfanView

CVE-2024-11524

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1592

ZDI-CAN-24597

IrfanView

CVE-2024-11523

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1591

ZDI-CAN-24599

IrfanView

CVE-2024-11525

IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1590

ZDI-CAN-24595

IrfanView

CVE-2024-11522

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1589

ZDI-CAN-24602

IrfanView

CVE-2024-11528

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1588

ZDI-CAN-24629

IrfanView

CVE-2024-11538

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1587

ZDI-CAN-24615

IrfanView

CVE-2024-11532

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1586

ZDI-CAN-24616

IrfanView

CVE-2024-11533

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1585

ZDI-CAN-24617

IrfanView

CVE-2024-11534

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1584

ZDI-CAN-24618

IrfanView

CVE-2024-11535

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1583

ZDI-CAN-24619

IrfanView

CVE-2024-11536

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1582

ZDI-CAN-24620

IrfanView

CVE-2024-11537

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1581

ZDI-CAN-24754

IrfanView

CVE-2024-11554

IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1580

ZDI-CAN-24488

IrfanView

CVE-2024-11520

IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1579

ZDI-CAN-24578

IrfanView

CVE-2024-11521

IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1578

ZDI-CAN-24853

IrfanView

CVE-2024-11560

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1577

ZDI-CAN-24857

IrfanView

CVE-2024-11561

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1576

ZDI-CAN-24860

IrfanView

CVE-2024-11563

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1575

ZDI-CAN-24871

IrfanView

CVE-2024-11567

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1574

ZDI-CAN-24873

IrfanView

CVE-2024-11569

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1573

ZDI-CAN-24900

IrfanView

CVE-2024-11574

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1572

ZDI-CAN-24858

IrfanView

CVE-2024-11562

IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1571

ZDI-CAN-24885

IrfanView

CVE-2024-11570

IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1570

ZDI-CAN-24897

IrfanView

CVE-2024-11572

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1569

ZDI-CAN-24901

IrfanView

CVE-2024-11575

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1568

ZDI-CAN-24864

IrfanView

CVE-2024-11564

IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1567

ZDI-CAN-24866

IrfanView

CVE-2024-11565

IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1566

ZDI-CAN-24895

IrfanView

CVE-2024-11571

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1565

ZDI-CAN-24898

IrfanView

CVE-2024-11573

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1564

ZDI-CAN-24868

IrfanView

CVE-2024-11566

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1563

ZDI-CAN-24872

IrfanView

CVE-2024-11568

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1562

ZDI-CAN-24795

IrfanView

CVE-2024-11556

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1561

ZDI-CAN-24807

IrfanView

CVE-2024-11557

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1560

ZDI-CAN-24808

IrfanView

CVE-2024-11558

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1559

ZDI-CAN-24780

IrfanView

CVE-2024-11555

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1558

ZDI-CAN-24809

IrfanView

CVE-2024-11559

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1557

ZDI-CAN-22718

IrfanView

CVE-2024-11510

IrfanView WBZ plugin WB1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1556

ZDI-CAN-22735

IrfanView

CVE-2024-11511

IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1555

ZDI-CAN-22741

IrfanView

CVE-2024-11512

IrfanView WBZ Plugin WB1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1554

ZDI-CAN-24752

IrfanView

CVE-2024-11553

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1553

ZDI-CAN-24699

IrfanView

CVE-2024-11539

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1552

ZDI-CAN-24702

IrfanView

CVE-2024-11541

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1551

ZDI-CAN-24700

IrfanView

CVE-2024-11540

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1550

ZDI-CAN-24703

IrfanView

CVE-2024-11542

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1549

ZDI-CAN-24749

IrfanView

CVE-2024-11551

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1548

ZDI-CAN-24704

IrfanView

CVE-2024-11543

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1547

ZDI-CAN-24746

IrfanView

CVE-2024-11549

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1546

ZDI-CAN-24751

IrfanView

CVE-2024-11552

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1545

ZDI-CAN-24745

IrfanView

CVE-2024-11548

IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1544

ZDI-CAN-24732

IrfanView

CVE-2024-11547

IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1543

ZDI-CAN-24714

IrfanView

CVE-2024-11546

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1542

ZDI-CAN-24709

IrfanView

CVE-2024-11545

IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1541

ZDI-CAN-24707

IrfanView

CVE-2024-11544

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1540

ZDI-CAN-24748

IrfanView

CVE-2024-11550

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1539

ZDI-CAN-24600

IrfanView

CVE-2024-11526

IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1538

ZDI-CAN-24601

IrfanView

CVE-2024-11527

IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1537

ZDI-CAN-24604

IrfanView

CVE-2024-11529

IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1536

ZDI-CAN-24605

IrfanView

CVE-2024-11530

IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1535

ZDI-CAN-24606

IrfanView

CVE-2024-11531

IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1534

ZDI-CAN-24221

Microsoft

CVE-2024-38024

Microsoft SharePoint Server FindSpecific Unsafe Reflection Remote Code Execution Vulnerability

ZDI-24-1533

ZDI-CAN-23477

Panda Security

CVE-2024-8424

Panda Security Dome PSANHost Link Following Local Privilege Escalation Vulnerability

ZDI-24-1532

ZDI-CAN-24346

7-Zip

CVE-2024-11477

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

ZDI-24-1531

ZDI-CAN-21830

RSA Security

RSA Security SecureID Software Token for Microsoft Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1530

ZDI-CAN-22613

WordPress

CVE-2024-31210

WordPress Core maybe_unserialize Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1529

ZDI-CAN-25011

Dassault Systèmes

CVE-2024-10204

Dassault Systèmes eDrawings Viewer X_B File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1528

ZDI-CAN-25038

Dassault Systèmes

CVE-2024-10204

Dassault Systèmes eDrawings Viewer SAT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-1527

ZDI-CAN-24521

Siemens

CVE-2024-52573

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1526

ZDI-CAN-24485

Siemens

CVE-2024-52571

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1525

ZDI-CAN-24237

Siemens

CVE-2024-52567

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1524

ZDI-CAN-24233

Siemens

CVE-2024-52566

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1523

ZDI-CAN-24231

Siemens

CVE-2024-52565

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1522

ZDI-CAN-24365

Siemens

CVE-2024-52570

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1521

ZDI-CAN-24260

Siemens

CVE-2024-52569

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1520

ZDI-CAN-24244

Siemens

CVE-2024-52568

Siemens Tecnomatix Plant Simulation WRL File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1519

ZDI-CAN-24543

Siemens

CVE-2024-52574

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1518

ZDI-CAN-24486

Siemens

CVE-2024-52572

Siemens Tecnomatix Plant Simulation WRL File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1517

ZDI-CAN-24269

McAfee

CVE-2024-49592

McAfee Total Protection Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZDI-24-1516

ZDI-CAN-25215

Trend Micro

CVE-2024-51503

Trend Micro Deep Security Agent Manual Scan Command Injection Remote Code Execution Vulnerability

ZDI-24-1515

ZDI-CAN-25012

Hugging Face

CVE-2024-11394

(0Day) Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1514

ZDI-CAN-25191

Hugging Face

CVE-2024-11393

(0Day) Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1513

ZDI-CAN-24322

Hugging Face

CVE-2024-11392

(0Day) Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1512

ZDI-CAN-23661

Progress Software

CVE-2024-7763

Progress Software WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability

ZDI-24-1511

ZDI-CAN-25090

Microsoft

CVE-2024-49032

Microsoft Office PowerPoint PPTX File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1510

ZDI-CAN-25414

Ivanti

CVE-2024-50330

Ivanti Endpoint Manager GetComputerID SQL Injection Remote Code Execution Vulnerability

ZDI-24-1509

ZDI-CAN-25250

Ivanti

CVE-2024-50329

Ivanti Endpoint Manager vulscan Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1508

ZDI-CAN-25063

Ivanti

CVE-2024-50328

Ivanti Endpoint Manager GetDetectedVulnerabilitiesDataTable SQL Injection Remote Code Execution Vulnerability

ZDI-24-1507

ZDI-CAN-25057

Ivanti

CVE-2024-50327

Ivanti Endpoint Manager ROI SQL Injection Remote Code Execution Vulnerability

ZDI-24-1506

ZDI-CAN-25054

Ivanti

CVE-2024-50326

Ivanti Endpoint Manager serverStorage SQL Injection Remote Code Execution Vulnerability

ZDI-24-1505

ZDI-CAN-24834

Ivanti

CVE-2024-50324

Ivanti Endpoint Manager GetFilePath Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1504

ZDI-CAN-24782

Ivanti

CVE-2024-50323

Ivanti Endpoint Manager TestAllowedSQL SQL Injection Remote Code Execution Vulnerability

ZDI-24-1503

ZDI-CAN-24273

Ivanti

CVE-2024-50322

Ivanti Endpoint Manager OnSaveToDB Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1502

ZDI-CAN-24293

Ivanti

CVE-2024-37376

Ivanti Endpoint Manager Report_RunPatch SQL Injection Remote Code Execution Vulnerability

ZDI-24-1501

ZDI-CAN-24272

Ivanti

CVE-2024-34787

Ivanti Endpoint Manager EFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1500

ZDI-CAN-24297

Ivanti

CVE-2024-34784

Ivanti Endpoint Manager DBDR SQL Injection Remote Code Execution Vulnerability

ZDI-24-1499

ZDI-CAN-24295

Ivanti

CVE-2024-34782

Ivanti Endpoint Manager PatchHistory SQL Injection Remote Code Execution Vulnerability

ZDI-24-1498

ZDI-CAN-24294

Ivanti

CVE-2024-34781

Ivanti Endpoint Manager Report_Run SQL Injection Remote Code Execution Vulnerability

ZDI-24-1497

ZDI-CAN-24292

Ivanti

CVE-2024-34781

Ivanti Endpoint Manager MP_QueryDetail SQL Injection Remote Code Execution Vulnerability

ZDI-24-1496

ZDI-CAN-24289

Ivanti

CVE-2024-32847

Ivanti Endpoint Manager Report_Run2 SQL Injection Remote Code Execution Vulnerability

ZDI-24-1495

ZDI-CAN-24286

Ivanti

CVE-2024-32844

Ivanti Endpoint Manager MP_QueryDetail2 SQL Injection Remote Code Execution Vulnerability

ZDI-24-1494

ZDI-CAN-24283

Ivanti

CVE-2024-32841

Ivanti Endpoint Manager GetCountForQuery SQL Injection Remote Code Execution Vulnerability

ZDI-24-1493

ZDI-CAN-24281

Ivanti

CVE-2024-32839

Ivanti Endpoint Manager MP_VistaReport SQL Injection Remote Code Execution Vulnerability

ZDI-24-1492

ZDI-CAN-25455

Ivanti

CVE-2024-50321

Ivanti Avalanche WLAvalancheService TV_FP Infinite Loop Denial-of-Service Vulnerability

ZDI-24-1491

ZDI-CAN-25454

Ivanti

CVE-2024-50320

Ivanti Avalanche WLAvalancheService TV_FC Infinite Loop Denial-of-Service Vulnerability

ZDI-24-1490

ZDI-CAN-25453

Ivanti

CVE-2024-50319

Ivanti Avalanche WLAvalancheService TV_FN Infinite Loop Denial-of-Service Vulnerability

ZDI-24-1489

ZDI-CAN-25357

Ivanti

CVE-2024-50318

Ivanti Avalanche WLAvalancheService TV_FP Null Pointer Dereference Denial-of-Service Vulnerability

ZDI-24-1488

ZDI-CAN-25356

Ivanti

CVE-2024-50317

Ivanti Avalanche WLAvalancheService TV_FN Null Pointer Dereference Denial-of-Service Vulnerability

ZDI-24-1487

ZDI-CAN-23545

Ivanti

CVE-2024-7571

Ivanti Secure Access Client Pulse Secure Service Link Following Local Privilege Escalation Vulnerability

ZDI-24-1486

ZDI-CAN-22629

G DATA

CVE-2024-6871

G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI-24-1485

ZDI-CAN-24145

Trimble

CVE-2024-9731

(0Day) Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1484

ZDI-CAN-24112

Trimble

CVE-2024-9728

(0Day) Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1483

ZDI-CAN-24097

Trimble

CVE-2024-9714

(0Day) Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1482

ZDI-CAN-24105

Trimble

CVE-2024-9721

(0Day) Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1481

ZDI-CAN-24106

Trimble

CVE-2024-9722

(0Day) Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1480

ZDI-CAN-24107

Trimble

CVE-2024-9723

(0Day) Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1479

ZDI-CAN-24108

Trimble

CVE-2024-9724

(0Day) Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1478

ZDI-CAN-24109

Trimble

CVE-2024-9725

(0Day) Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1477

ZDI-CAN-24104

Trimble

CVE-2024-9720

(0Day) Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1476

ZDI-CAN-24111

Trimble

CVE-2024-9727

(0Day) Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1475

ZDI-CAN-24110

Trimble

CVE-2024-9726

(0Day) Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1474

ZDI-CAN-23885

Trimble

CVE-2024-9713

(0Day) Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1473

ZDI-CAN-23530

Trimble

CVE-2024-9712

(0Day) Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1472

ZDI-CAN-24589

Veeam

CVE-2024-40715

Veeam Backup Enterprise Manager AuthorizeByVMwareSsoToken Improper Certificate Validation Authentication Bypass Vulnerability

ZDI-24-1471

ZDI-CAN-23479

Panda Security

CVE-2024-8424

Panda Security Dome PSANHost Link Following Local Privilege Escalation Vulnerability

ZDI-24-1470

ZDI-CAN-25010

Delta Electronics

CVE-2024-39354

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1469

ZDI-CAN-25009

Delta Electronics

CVE-2024-39605

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1468

ZDI-CAN-25008

Delta Electronics

CVE-2024-47131

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1467

ZDI-CAN-25007

Delta Electronics

CVE-2024-39605

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1466

ZDI-CAN-25006

Delta Electronics

CVE-2024-47131

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1465

ZDI-CAN-25005

Delta Electronics

CVE-2024-39605

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1464

ZDI-CAN-25004

Delta Electronics

CVE-2024-39354

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1463

ZDI-CAN-25003

Delta Electronics

CVE-2024-47131

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1462

ZDI-CAN-25002

Delta Electronics

CVE-2024-39605

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1461

ZDI-CAN-25001

Delta Electronics

CVE-2024-39605

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1460

ZDI-CAN-24538

Centreon

CVE-2024-39842

Centreon updateContactHostCommands_MC SQL Injection Privilege Escalation Vulnerability

ZDI-24-1459

ZDI-CAN-24537

Centreon

CVE-2024-39843

Centreon updateAccessGroupLinks_MC SQL Injection Privilege Escalation Vulnerability

ZDI-24-1458

ZDI-CAN-24535

Centreon

CVE-2024-39842

Centreon updateContactServiceCommands_MC SQL Injection Privilege Escalation Vulnerability

ZDI-24-1457

ZDI-CAN-24594

Delta Electronics

CVE-2024-10456

Delta Electronics InfraSuite Device Master _gExtraInfo Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1456

ZDI-CAN-25282

Linux

 

Linux Kernel ksmbd Session Race Condition Remote Code Execution Vulnerability

ZDI-24-1455

ZDI-CAN-23237

Linux

 

Linux Kernel Net Scheduler ATM Queuing Discipline Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-1454

ZDI-CAN-24184

Linux

 

Linux Kernel nftables Improper Validation of Array Index Local Privilege Escalation Vulnerability

ZDI-24-1453

ZDI-CAN-24756

X.Org

CVE-2024-9632

X.Org Server XkbSetCompatMap Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-24-1452

ZDI-CAN-24943

Autodesk

CVE-2024-8592

Autodesk AutoCAD CATPART File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1451

ZDI-CAN-24763

Apple

CVE-2024-44284

Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1450

ZDI-CAN-25146

Apple

CVE-2024-44283

Apple macOS ICC Profile Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1449

ZDI-CAN-25163

Apple

CVE-2024-44282

Apple macOS CoreFoundation Font Glyphs Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1448

ZDI-CAN-25148

Apple

CVE-2024-44281

Apple macOS ICC Profile Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1447

ZDI-CAN-25147

Apple

CVE-2024-44279

Apple macOS ICC Profile Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1446

ZDI-CAN-25084

Apple

CVE-2024-44237

Apple macOS ICC Profile Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1445

ZDI-CAN-25085

Apple

CVE-2024-44236

Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1444

ZDI-CAN-25204

Apple

CVE-2024-44218

Apple SceneKit Improper Validation of Array Index Remote Code Execution Vulnerability

ZDI-24-1443

ZDI-CAN-23979

Apple

CVE-2024-44215

Apple macOS ImageIO JP2 Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1442

ZDI-CAN-25214

Apple

CVE-2024-44240, CVE-2024-44302

Apple macOS CoreText Font Ligature Caret List Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1441

ZDI-CAN-24946

Autodesk

CVE-2024-8587

Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1440

ZDI-CAN-25032

Autodesk

CVE-2024-8600

Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1439

ZDI-CAN-24969

Autodesk

CVE-2024-8588

Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1438

ZDI-CAN-25133

Autodesk

CVE-2024-8596

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1437

ZDI-CAN-25138

Autodesk

CVE-2024-8589

Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1436

ZDI-CAN-25033

Autodesk

CVE-2024-8590

Autodesk AutoCAD 3DM File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1435

ZDI-CAN-25072

Autodesk

CVE-2024-8591

Autodesk AutoCAD 3DM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1434

ZDI-CAN-25107

Autodesk

CVE-2024-8593

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1433

ZDI-CAN-24955

Autodesk

CVE-2024-8594

Autodesk AutoCAD MODEL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1432

ZDI-CAN-25126

Autodesk

CVE-2024-8595

Autodesk AutoCAD MODEL File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1431

ZDI-CAN-24961

Autodesk

CVE-2024-8597

Autodesk AutoCAD STEP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1430

ZDI-CAN-25070

Autodesk

CVE-2024-8598

Autodesk AutoCAD ACTranslators STEP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1429

ZDI-CAN-25104

Autodesk

CVE-2024-8599

Autodesk AutoCAD ACTranslators STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1428

ZDI-CAN-25168

Autodesk

CVE-2024-9826

Autodesk AutoCAD ACTranslators 3DM File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1427

ZDI-CAN-25194

Autodesk

CVE-2024-9827

Autodesk AutoCAD ACTranslators CATPART File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1426

ZDI-CAN-25259

Autodesk

CVE-2024-8896

Autodesk AutoCAD DXF File Parsing Unitialized Variable Remote Code Execution Vulnerability

ZDI-24-1425

ZDI-CAN-25271

Autodesk

CVE-2024-9489

Autodesk AutoCAD DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1424

ZDI-CAN-25478

Autodesk

CVE-2024-9996

Autodesk AutoCAD DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1423

ZDI-CAN-25479

Autodesk

CVE-2024-9997

Autodesk AutoCAD DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1422

ZDI-CAN-19873

Nikon

CVE-2024-8025

Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1421

ZDI-CAN-23941

VMware

CVE-2024-38814

VMware HCX listExtensions SQL Injection Remote Code Execution Vulnerability

ZDI-24-1420

ZDI-CAN-23502

Schneider Electric

CVE-2015-0250

Schneider Electric EcoStruxure Data Center Expert XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-1419

ZDI-CAN-17700

Trend Micro

CVE-2024-48903

Trend Micro Deep Security Improper Access Control Local Privilege Escalation Vulnerability

ZDI-24-1418

ZDI-CAN-23182

Trend Micro

CVE-2024-48904

Trend Micro Cloud Edge REST API Command Injection Remote Code Execution Vulnerability

ZDI-24-1417

ZDI-CAN-23203

Schneider Electric

CVE-2024-8531

Schneider Electric EcoStruxure Data Center Expert Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

ZDI-24-1416

ZDI-CAN-23489

Schneider Electric

CVE-2024-8530

Schneider Electric EcoStruxure Data Center Expert Missing Authentication Information Disclosure Vulnerability

ZDI-24-1415

ZDI-CAN-22347

Schneider Electric

CVE-2024-8422

Schneider Electric Zelio Soft 2 ZM2 File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1414

ZDI-CAN-25016

Oracle

CVE-2024-21273

Oracle VirtualBox BusLogic Uninitialized Memory Information Disclosure Vulnerability

ZDI-24-1413

ZDI-CAN-23961

Oracle

CVE-2024-21259

Oracle VirtualBox TPM Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-24-1412

ZDI-CAN-24045

Oracle

CVE-2024-21248

Oracle VirtualBox Shared Folders Incorrect Authorization Local Privilege Escalation Vulnerability

ZDI-24-1411

ZDI-CAN-24765

Delta Electronics

CVE-2024-47966

Delta Electronics CNCSoft-G2 DPAX File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-1410

ZDI-CAN-24200

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1409

ZDI-CAN-24199

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1408

ZDI-CAN-24197

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1407

ZDI-CAN-24196

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1406

ZDI-CAN-24202

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1405

ZDI-CAN-24201

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1404

ZDI-CAN-23768

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1403

ZDI-CAN-25270

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1402

ZDI-CAN-25055

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1401

ZDI-CAN-25056

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1400

ZDI-CAN-25034

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1399

ZDI-CAN-25037

Delta Electronics

CVE-2024-47964

Delta Electronics CNCSoft-G2 DPAX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1398

ZDI-CAN-24788

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DOPSoft ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1397

ZDI-CAN-24790

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DOPSoft CMT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1396

ZDI-CAN-24994

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1395

ZDI-CAN-24758

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1394

ZDI-CAN-24826

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1393

ZDI-CAN-24829

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1392

ZDI-CAN-24910

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1391

ZDI-CAN-24971

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1390

ZDI-CAN-24363

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1389

ZDI-CAN-24358

Delta Electronics

CVE-2024-47962

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1388

ZDI-CAN-24766

Delta Electronics

CVE-2024-47965

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1387

ZDI-CAN-24767

Delta Electronics

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1386

ZDI-CAN-24825

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1385

ZDI-CAN-24827

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1384

ZDI-CAN-24828

Delta Electronics

CVE-2024-47963

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1383

ZDI-CAN-25351

PostHog

CVE-2024-9710

PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

ZDI-24-1382

ZDI-CAN-23962

QEMU

CVE-2024-6519

QEMU SCSI Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-1381

ZDI-CAN-24146

Trimble

CVE-2024-9730

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1380

ZDI-CAN-24144

Trimble

CVE-2024-9729

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1379

ZDI-CAN-24103

Trimble

CVE-2024-9719

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1378

ZDI-CAN-24102

Trimble

CVE-2024-9718

Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1377

ZDI-CAN-24101

Trimble

CVE-2024-9717

Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-1376

ZDI-CAN-24098

Trimble

CVE-2024-9715

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1375

ZDI-CAN-24100

Trimble

CVE-2024-9716

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1374

ZDI-CAN-23283

IrfanView

CVE-2024-9261

IrfanView SID File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1373

ZDI-CAN-23280

IrfanView

CVE-2024-9260

IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1372

ZDI-CAN-23278

IrfanView

CVE-2024-9259

IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1371

ZDI-CAN-23277

IrfanView

CVE-2024-9767

IrfanView SID File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1370

ZDI-CAN-23276

IrfanView

CVE-2024-9258

IrfanView SID File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

ZDI-24-1369

ZDI-CAN-23939

Zimbra

CVE-2024-9665

Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability

ZDI-24-1368

ZDI-CAN-24472

Tungsten Automation

CVE-2024-9755

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1367

ZDI-CAN-24473

Tungsten Automation

CVE-2024-9757

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1366

ZDI-CAN-24477

Tungsten Automation

CVE-2024-9761

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1365

ZDI-CAN-24451

Tungsten Automation

CVE-2024-9735

Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1364

ZDI-CAN-24460

Tungsten Automation

CVE-2024-9744

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1363

ZDI-CAN-24468

Tungsten Automation

CVE-2024-9751

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1362

ZDI-CAN-24480

Tungsten Automation

CVE-2024-9764

Tungsten Automation Power PDF PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1361

ZDI-CAN-24474

Tungsten Automation

CVE-2024-9758

Tungsten Automation Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1360

ZDI-CAN-24470

Tungsten Automation

CVE-2024-9753

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1359

ZDI-CAN-24479

Tungsten Automation

CVE-2024-9763

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1358

ZDI-CAN-24478

Tungsten Automation

CVE-2024-9762

Tungsten Automation Power PDF OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1357

ZDI-CAN-24476

Tungsten Automation

CVE-2024-9760

Tungsten Automation Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1356

ZDI-CAN-24475

Tungsten Automation

CVE-2024-9759

Tungsten Automation Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1355

ZDI-CAN-24471

Tungsten Automation

CVE-2024-9754

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1354

ZDI-CAN-24469

Tungsten Automation

CVE-2024-9752

Tungsten Automation Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1353

ZDI-CAN-24400

Tungsten Automation

CVE-2024-9734

Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1352

ZDI-CAN-24389

Tungsten Automation

CVE-2024-9733

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1351

ZDI-CAN-24452

Tungsten Automation

CVE-2024-9736

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1350

ZDI-CAN-24453

Tungsten Automation

CVE-2024-9737

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1349

ZDI-CAN-24455

Tungsten Automation

CVE-2024-9739

Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1348

ZDI-CAN-24466

Tungsten Automation

CVE-2024-9750

Tungsten Automation Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1347

ZDI-CAN-24461

Tungsten Automation

CVE-2024-9745

Tungsten Automation Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1346

ZDI-CAN-24457

Tungsten Automation

CVE-2024-9741

Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1345

ZDI-CAN-24462

Tungsten Automation

CVE-2024-9746

Tungsten Automation Power PDF TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1344

ZDI-CAN-24463

Tungsten Automation

CVE-2024-9747

Tungsten Automation Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1343

ZDI-CAN-24456

Tungsten Automation

CVE-2024-9740

Tungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1342

ZDI-CAN-24458

Tungsten Automation

CVE-2024-9742

Tungsten Automation Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1341

ZDI-CAN-24454

Tungsten Automation

CVE-2024-9738

Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1340

ZDI-CAN-24465

Tungsten Automation

CVE-2024-9749

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1339

ZDI-CAN-24464

Tungsten Automation

CVE-2024-9748

Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1338

ZDI-CAN-24459

Tungsten Automation

CVE-2024-9743

Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1337

ZDI-CAN-24385

Tungsten Automation

CVE-2024-9732

Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1336

ZDI-CAN-24304

Wacom

CVE-2024-9766

Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability

ZDI-24-1335

ZDI-CAN-22656

SonicWALL

CVE-2024-45315

SonicWALL Connect Tunnel Link Following Denial-of-Service Vulnerability

ZDI-24-1334

ZDI-CAN-22655

SonicWALL

CVE-2024-45316

SonicWALL Connect Tunnel Link Following Local Privilege Escalation Vulnerability

ZDI-24-1333

ZDI-CAN-24764

NVIDIA

CVE-2024-0113

NVIDIA Onyx Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1332

ZDI-CAN-24026

Adobe

CVE-2024-45146

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1331

ZDI-CAN-24056

Adobe

CVE-2024-45138

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1330

ZDI-CAN-24370

Microsoft

CVE-2024-43556

Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-1329

ZDI-CAN-25281

Axis Communications

Axis Communications Autodesk Plugin AxisAddin axisapphelpfiles Remote Code Execution Vulnerability

ZDI-24-1328

ZDI-CAN-25280

Axis Communications

Axis Communications Autodesk Plugin AzureBlobRestAPI axiscontentfiles Remote Code Execution Vulnerability

ZDI-24-1327

ZDI-CAN-23526

Ivanti

CVE-2024-47011

Ivanti Avalanche Faces ResourceManager Information Disclosure Vulnerability

ZDI-24-1326

ZDI-CAN-23524

Ivanti

CVE-2024-47010

Ivanti Avalanche SecureFilter allowPassThrough Authentication Bypass Vulnerability

ZDI-24-1325

ZDI-CAN-23523

Ivanti

CVE-2024-47009

Ivanti Avalanche SecureFilter Content-Type Authentication Bypass Vulnerability

ZDI-24-1324

ZDI-CAN-23520

Ivanti

CVE-2024-47008

Ivanti Avalanche validateAMCWSConnection Server-Side Request Forgery Information Disclosure Vulnerability

ZDI-24-1323

ZDI-CAN-24536

Centreon

CVE-2024-39843

Centreon updateContactContactGroup SQL Injection Privilege Escalation Vulnerability

ZDI-24-1322

ZDI-CAN-24534

Centreon

CVE-2024-39842

Centreon updateAccessGroupLinks SQL Injection Privilege Escalation Vulnerability

ZDI-24-1321

ZDI-CAN-24149

Apple

CVE-2024-40841

Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1320

ZDI-CAN-24743

Autodesk

CVE-2024-7674

Autodesk Navisworks Freedom DWF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1319

ZDI-CAN-24496

Autodesk

CVE-2024-7672

Autodesk Navisworks Freedom DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1318

ZDI-CAN-24562

Autodesk

CVE-2024-7671

Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1317

ZDI-CAN-24559

Autodesk

CVE-2024-7670

Autodesk Navisworks Freedom DWFX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1316

ZDI-CAN-24560

Autodesk

CVE-2024-7673

Autodesk Navisworks Freedom DWFX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1315

ZDI-CAN-24561

Autodesk

CVE-2024-7675

Autodesk Navisworks Freedom DWF File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1314

ZDI-CAN-24042

PaperCut

CVE-2024-8405

PaperCut NG pc-web-print Link Following Denial-of-Service Vulnerability

ZDI-24-1313

ZDI-CAN-24194

Apple

CVE-2024-40777

Apple macOS ImageIO PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1312

ZDI-CAN-23980

Apple

CVE-2024-40784

Apple macOS ImageIO KTX Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1311

ZDI-CAN-23562

Microsoft

CVE-2024-38066

Microsoft Windows Menu DC Path Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-1310

ZDI-CAN-23010

Lenovo

CVE-2024-4696

Lenovo Service Bridge Command Injection Remote Code Execution Vulnerability

ZDI-24-1309

ZDI-CAN-25267

Foxit

CVE-2024-9256

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1308

ZDI-CAN-25174

Foxit

CVE-2024-9255

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1307

ZDI-CAN-25173

Foxit

CVE-2024-9254

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1306

ZDI-CAN-24490

Foxit

CVE-2024-9251

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

ZDI-24-1305

ZDI-CAN-24492

Foxit

CVE-2024-9253

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1304

ZDI-CAN-24491

Foxit

CVE-2024-9252

Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability

ZDI-24-1303

ZDI-CAN-24489

Foxit

CVE-2024-9250

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1302

ZDI-CAN-24300

Foxit

CVE-2024-9248

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1301

ZDI-CAN-24301

Foxit

CVE-2024-9249

Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1300

ZDI-CAN-24173

Foxit

CVE-2024-9247

Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1299

ZDI-CAN-24135

Foxit

CVE-2024-9246

Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1298

ZDI-CAN-23933

Foxit

CVE-2024-9244

Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI-24-1297

ZDI-CAN-23966

Foxit

CVE-2024-9245

Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI-24-1296

ZDI-CAN-23932

Foxit

CVE-2024-9243

Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1295

ZDI-CAN-25265

Logsign

CVE-2024-9257

Logsign Unified SecOps Platform delete_gsuite_key_file Input Validation Arbitrary File Deletion Vulnerability

ZDI-24-1294

ZDI-CAN-22537

Western Digital

CVE-2024-22170

Western Digital MyCloud PR4100 ddns-start Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1293

ZDI-CAN-24175

Microsoft

CVE-2024-38249

Microsoft Windows BeginPaint Brush Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-1292

ZDI-CAN-24179

Microsoft

CVE-2024-38249

Microsoft Windows BeginPaint Color Space Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-1291

ZDI-CAN-24091

Microsoft

CVE-2024-38249

Microsoft Windows Device Context Improper Release Local Privilege Escalation Vulnerability

ZDI-24-1290

ZDI-CAN-24740

TeamViewer

CVE-2024-7481

TeamViewer Missing Authentication Local Privilege Escalation Vulnerability

ZDI-24-1289

ZDI-CAN-24623

TeamViewer

CVE-2024-7479

TeamViewer Missing Authentication Local Privilege Escalation Vulnerability

ZDI-24-1288

ZDI-CAN-24088

Apple

CVE-2024-40846

Apple macOS AppleIntelKBLGraphicsMTLDriver Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1287

ZDI-CAN-24140

Apple

CVE-2024-44160

Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1286

ZDI-CAN-24411

Apple

CVE-2024-44161

Apple macOS AppleGVA Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1285

ZDI-CAN-24142

Apple

CVE-2024-44154

Apple macOS VideoToolbox Uninitialized Memory Information Disclosure Vulnerability

ZDI-24-1284

ZDI-CAN-24087

Apple

CVE-2024-40841

Apple macOS AppleIntelKBLGraphicsMTLDriver Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1283

ZDI-CAN-24570

Apple

CVE-2024-44176

Apple macOS ImageIO JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1282

ZDI-CAN-23949

Apple

CVE-2024-40845

Apple macOS AppleGVA Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1281

ZDI-CAN-24133

Apple

CVE-2024-27861

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1280

ZDI-CAN-24132

Apple

CVE-2024-27861

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1279

ZDI-CAN-24129

Apple

CVE-2024-27860

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1278

ZDI-CAN-24126

Apple

CVE-2024-27861

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1277

ZDI-CAN-24125

Apple

CVE-2024-27861

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1276

ZDI-CAN-24124

Apple

CVE-2024-27861

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1275

ZDI-CAN-25145

FastStone

CVE-2024-9114

(0Day) FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1274

ZDI-CAN-25140

FastStone

CVE-2024-9113

(0Day) FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1273

ZDI-CAN-25102

FastStone

CVE-2024-9112

(0Day) FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1272

ZDI-CAN-25269

PDF-XChange

CVE-2024-8849

PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1271

ZDI-CAN-25268

PDF-XChange

CVE-2024-8848

PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1270

ZDI-CAN-25198

PDF-XChange

CVE-2024-8847

PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1269

ZDI-CAN-24835

PDF-XChange

CVE-2024-8846

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1268

ZDI-CAN-24553

PDF-XChange

CVE-2024-8845

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1267

ZDI-CAN-24550

PDF-XChange

CVE-2024-8844

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1266

ZDI-CAN-24495

PDF-XChange

CVE-2024-8843

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1265

ZDI-CAN-24481

PDF-XChange

CVE-2024-8842

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-1264

ZDI-CAN-24432

PDF-XChange

CVE-2024-8841

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1263

ZDI-CAN-24420

PDF-XChange

CVE-2024-8840

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1262

ZDI-CAN-24419

PDF-XChange

CVE-2024-8839

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1261

ZDI-CAN-24409

PDF-XChange

CVE-2024-8838

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1260

ZDI-CAN-24408

PDF-XChange

CVE-2024-8837

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1259

ZDI-CAN-24354

PDF-XChange

CVE-2024-8836

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1258

ZDI-CAN-24320

PDF-XChange

CVE-2024-8835

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1257

ZDI-CAN-24319

PDF-XChange

CVE-2024-8834

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1256

ZDI-CAN-24318

PDF-XChange

CVE-2024-8833

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1255

ZDI-CAN-24317

PDF-XChange

CVE-2024-8832

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1254

ZDI-CAN-24316

PDF-XChange

CVE-2024-8831

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1253

ZDI-CAN-24315

PDF-XChange

CVE-2024-8830

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1252

ZDI-CAN-24314

PDF-XChange

CVE-2024-8829

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1251

ZDI-CAN-24313

PDF-XChange

CVE-2024-8828

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1250

ZDI-CAN-24306

PDF-XChange

CVE-2024-8827

PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1249

ZDI-CAN-24305

PDF-XChange

CVE-2024-8826

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1248

ZDI-CAN-24263

PDF-XChange

CVE-2024-8825

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1247

ZDI-CAN-24262

PDF-XChange

CVE-2024-8824

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1246

ZDI-CAN-24261

PDF-XChange

CVE-2024-8823

PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1245

ZDI-CAN-24217

PDF-XChange

CVE-2024-8822

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1244

ZDI-CAN-24216

PDF-XChange

CVE-2024-8821

PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability

ZDI-24-1243

ZDI-CAN-24215

PDF-XChange

CVE-2024-8820

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1242

ZDI-CAN-24214

PDF-XChange

CVE-2024-8819

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1241

ZDI-CAN-24213

PDF-XChange

CVE-2024-8818

PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1240

ZDI-CAN-24212

PDF-XChange

CVE-2024-8817

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1239

ZDI-CAN-24211

PDF-XChange

CVE-2024-8816

PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability

ZDI-24-1238

ZDI-CAN-24210

PDF-XChange

CVE-2024-8815

PDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1237

ZDI-CAN-24209

PDF-XChange

CVE-2024-8814

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1236

ZDI-CAN-24208

PDF-XChange

CVE-2024-8813

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1235

ZDI-CAN-24207

PDF-XChange

CVE-2024-8812

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-1234

ZDI-CAN-23983

WinZip Computing

CVE-2024-8811

WinZip Mark-of-the-Web Bypass Vulnerability

ZDI-24-1233

ZDI-CAN-24178

Cohesive Networks

CVE-2024-8809

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

ZDI-24-1232

ZDI-CAN-24177

Cohesive Networks

CVE-2024-8808

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

ZDI-24-1231

ZDI-CAN-24176

Cohesive Networks

CVE-2024-8807

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

ZDI-24-1230

ZDI-CAN-24160

Cohesive Networks

CVE-2024-8806

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability

ZDI-24-1229

ZDI-CAN-25177

BlueZ

CVE-2024-8805

BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability

ZDI-24-1228

ZDI-CAN-24585

Trend Micro

CVE-2024-46903

Trend Micro Deep Discovery Inspector SQL Injection Information Disclosure Vulnerability

ZDI-24-1227

ZDI-CAN-24584

Trend Micro

CVE-2024-46902

Trend Micro Deep Discovery Inspector SQL Injection Information Disclosure Vulnerability

ZDI-24-1226

ZDI-CAN-23546

mySCADA

CVE-2024-4708

mySCADA myPRO Hard-Coded Credentials Remote Code Execution Vulnerability

ZDI-24-1225

ZDI-CAN-24271

SolarWinds

CVE-2024-28990

SolarWinds Access Rights Manager Hard-Coded Credentials Authentication Bypass Vulnerability

ZDI-24-1224

ZDI-CAN-24270

SolarWinds

CVE-2024-28991

SolarWinds Access Rights Manager JsonSerializationBinder Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1223

ZDI-CAN-23850

Ivanti

CVE-2024-29847

Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1222

ZDI-CAN-23860

Ivanti

CVE-2024-8012

Ivanti Workspace Control RES Exposed Dangerous Method Local Privilege Escalation Vulnerability

ZDI-24-1221

ZDI-CAN-24302

Ivanti

CVE-2024-34785

Ivanti Endpoint Manager LoadMotherboardTable SQL Injection Remote Code Execution Vulnerability

ZDI-24-1220

ZDI-CAN-24296

Ivanti

CVE-2024-34783

Ivanti Endpoint Manager LoadSlotsTable SQL Injection Remote Code Execution Vulnerability

ZDI-24-1219

ZDI-CAN-24291

Ivanti

CVE-2024-34779

Ivanti Endpoint Manager loadModuleTable SQL Injection Remote Code Execution Vulnerability

ZDI-24-1218

ZDI-CAN-24290

Ivanti

CVE-2024-32848

Ivanti Endpoint Manager updateAssetInfo SQL Injection Remote Code Execution Vulnerability

ZDI-24-1217

ZDI-CAN-24288

Ivanti

CVE-2024-32846

Ivanti Endpoint Manager loadSystemInfo SQL Injection Remote Code Execution Vulnerability

ZDI-24-1216

ZDI-CAN-24287

Ivanti

CVE-2024-32845

Ivanti Endpoint Manager GetSQLStatement SQL Injection Remote Code Execution Vulnerability

ZDI-24-1215

ZDI-CAN-24285

Ivanti

CVE-2024-32843

Ivanti Endpoint Manager loadKeyboardTable SQL Injection Remote Code Execution Vulnerability

ZDI-24-1214

ZDI-CAN-24284

Ivanti

CVE-2024-32842

Ivanti Endpoint Manager GetVulnerabilitiesDataTable SQL Injection Remote Code Execution Vulnerability

ZDI-24-1213

ZDI-CAN-24282

Ivanti

CVE-2024-32840

Ivanti Endpoint Manager loadMouseTable SQL Injection Remote Code Execution Vulnerability

ZDI-24-1212

ZDI-CAN-24046

Ivanti

CVE-2024-37397

Ivanti Endpoint Manager ImportXml XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-1211

ZDI-CAN-24274

Ivanti

CVE-2024-8191

Ivanti Endpoint Manager WasPreviouslyMapped SQL Injection Remote Code Execution Vulnerability

ZDI-24-1210

ZDI-CAN-24000

Microsoft

CVE-2024-38213

Microsoft Windows Drag and Drop SmartScreen Bypass Vulnerability

ZDI-24-1209

ZDI-CAN-23616

Microsoft

CVE-2024-38213

Microsoft Windows Defender SmartScreen Bypass Vulnerability

ZDI-24-1208

ZDI-CAN-20112

Visteon

CVE-2024-8355

(0Day) Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability

ZDI-24-1207

ZDI-CAN-24998

Microsoft

CVE-2024-43461

Microsoft Windows Internet Explorer File Extension Spoofing Remote Code Execution Vulnerability

ZDI-24-1206

ZDI-CAN-24482

Microsoft

CVE-2024-43466

Microsoft SharePoint SPAutoSerializingObject Deserialization of Untrusted Data Denial-of-Service Vulnerability

ZDI-24-1205

ZDI-CAN-24174

Microsoft

CVE-2024-38249

Microsoft Windows BeginPaint Pen Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-1204

ZDI-CAN-23930

Microsoft

CVE-2024-38018

Microsoft SharePoint SPThemes Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1203

ZDI-CAN-24266

Adobe

CVE-2024-43760

Adobe Photoshop JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1202

ZDI-CAN-24049

Adobe

CVE-2024-39381

Adobe After Effects AVI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1201

ZDI-CAN-24052

Adobe

CVE-2024-39384

Adobe Premiere Pro AVI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1200

ZDI-CAN-24051

Adobe

CVE-2024-39377

Adobe Media Encoder AVI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1199

ZDI-CAN-24048

Adobe

CVE-2024-39382

Adobe After Effects AVI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1198

ZDI-CAN-24053

Adobe

CVE-2024-39385

Adobe Premiere Pro AVI File Parsing Use-After-Free Information Disclosure Vulnerability

ZDI-24-1197

ZDI-CAN-24050

Adobe

CVE-2024-39378

Adobe Audition AVI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1196

ZDI-CAN-24186

Adobe

CVE-2024-45107

Adobe Acrobat Reader DC Doc Object Use-After-Free Information Disclosure Vulnerability

ZDI-24-1195

ZDI-CAN-22321

Malwarebytes

CVE-2024-6260

Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability

ZDI-24-1194

ZDI-CAN-24058

Linux

CVE-2024-39463

Linux Kernel Plan 9 File System Race Condition Local Privilege Escalation Vulnerability

ZDI-24-1193

ZDI-CAN-23810

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1192

ZDI-CAN-23421

Visteon

CVE-2024-8360

(0Day) Visteon Infotainment REFLASH_DDU_ExtractFile Command Injection Remote Code Execution Vulnerability

ZDI-24-1191

ZDI-CAN-23420

Visteon

CVE-2024-8359

(0Day) Visteon Infotainment REFLASH_DDU_FindFile Command Injection Remote Code Execution Vulnerability

ZDI-24-1190

ZDI-CAN-23422

Visteon

CVE-2024-8358

(0Day) Visteon Infotainment UPDATES_ExtractFile Command Injection Remote Code Execution Vulnerability

ZDI-24-1189

ZDI-CAN-23759

Visteon

CVE-2024-8357

(0Day) Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability

ZDI-24-1188

ZDI-CAN-23758

Visteon

CVE-2024-8356

(0Day) Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability

ZDI-24-1187

ZDI-CAN-23667

Progress Software

CVE-2024-6672

Progress Software WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability

ZDI-24-1186

ZDI-CAN-23662

Progress Software

CVE-2024-6671

Progress Software WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability

ZDI-24-1185

ZDI-CAN-23660

Progress Software

CVE-2024-6670

Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

ZDI-24-1184

ZDI-CAN-22322

Progress Software

CVE-2024-7744

Progress Software WS_FTP Directory Traversal Information Disclosure Vulnerability

ZDI-24-1183

ZDI-CAN-22330

Delta Electronics

CVE-2024-8255

Delta Electronics DTN Soft BIN File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1182

ZDI-CAN-24591

Linux

 

Linux Kernel Netfilter Conntrack Type Confusion Information Disclosure Vulnerability

ZDI-24-1181

ZDI-CAN-24830

Axis Communications

Axis Communications Autodesk Plugin Exposure of Sensitive Information Authentication Bypass Vulnerability

ZDI-24-1180

ZDI-CAN-24061

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1179

ZDI-CAN-24068

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1178

ZDI-CAN-24083

Qualcomm Technologies

CVE-2024-21473

Qualcomm Wi-Fi SON LDB Service Improper Input Validation Remote Code Execution Vulnerability

ZDI-24-1177

ZDI-CAN-24023

Amazon

 

Amazon AWS CloudFormation Templates Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1176

ZDI-CAN-23901

Amazon

 

Amazon AWS aws-glue-with-s2s-vpn Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1175

ZDI-CAN-23812

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1174

ZDI-CAN-23834

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1173

ZDI-CAN-23833

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1172

ZDI-CAN-23808

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1171

ZDI-CAN-23806

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1170

ZDI-CAN-23805

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1169

ZDI-CAN-23804

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1168

ZDI-CAN-23803

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1167

ZDI-CAN-23802

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1166

ZDI-CAN-23801

Delta Electronics

CVE-2024-7502

Delta Electronics DIAScreen DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1165

ZDI-CAN-23609

Allegra

CVE-2024-30372

Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability

ZDI-24-1164

ZDI-CAN-23453

Allegra

CVE-2024-5581

Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1163

ZDI-CAN-23452

Allegra

CVE-2024-5580

Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1162

ZDI-CAN-23451

Allegra

CVE-2024-5579

Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1161

ZDI-CAN-23566

Linux

CVE-2024-36960

Linux Kernel vmwgfx Driver Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1160

ZDI-CAN-23730

Apple

CVE-2024-40789

Apple WebKit WebCodecs VideoFrame Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1159

ZDI-CAN-23381

G DATA

CVE-2024-30377

G DATA Total Security Scan Server Link Following Local Privilege Escalation Vulnerability

ZDI-24-1158

ZDI-CAN-24040

Rockwell Automation

CVE-2024-7988

Rockwell Automation ThinManager ThinServer Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-1157

ZDI-CAN-24006

Rockwell Automation

CVE-2024-7987

Rockwell Automation ThinManager ThinServer Arbitrary File Creation Privilege Escalation Vulnerability

ZDI-24-1156

ZDI-CAN-24002

Rockwell Automation

CVE-2024-7986

Rockwell Automation ThinManager ThinServer Arbitrary File Read Information Disclosure Vulnerability

ZDI-24-1155

ZDI-CAN-23859

PaperCut

CVE-2024-4712

PaperCut NG image-handler Directory Traversal Local Privilege Escalation Vulnerability

ZDI-24-1154

ZDI-CAN-23384

Autel

CVE-2024-7795

Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1153

ZDI-CAN-24499

Autodesk

CVE-2024-7305

Autodesk AutoCAD DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1152

ZDI-CAN-23499

Phoenix Contact

CVE-2024-3913

Phoenix Contact CHARX SEC-3100 Improper Access Control Authentication Bypass Vulnerability

ZDI-24-1151

ZDI-CAN-24220

Ivanti

CVE-2024-37399

Ivanti Avalanche WLAvalancheService Null Pointer Dereference Denial-of-Service Vulnerability

ZDI-24-1150

ZDI-CAN-22083

Ivanti

CVE-2024-38653

Ivanti Avalanche decodeToMap XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-1149

ZDI-CAN-21401

Ivanti

CVE-2024-38652

Ivanti Avalanche deleteSkin Directory Traversal Arbitrary File Deletion Vulnerability

ZDI-24-1148

ZDI-CAN-24264

Microsoft

CVE-2024-38171

Microsoft Office PowerPoint PPTX File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1147

ZDI-CAN-23936

Microsoft

CVE-2024-38163

Microsoft Windows 10 WinREUpdateInstaller_2401B_amd64 Link Following Privilege Escalation Vulnerability

ZDI-24-1146

ZDI-CAN-23934

Microsoft

CVE-2024-38163

Microsoft Windows 10 WinREUpdateInstaller DLL Hijacking Local Privilege Escalation Vulnerability

ZDI-24-1145

ZDI-CAN-23552

Microsoft

CVE-2024-38169

Microsoft Office Visio VSDX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1144

ZDI-CAN-24055

Adobe

CVE-2024-39388

Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1143

ZDI-CAN-24031

Adobe

CVE-2024-34124

Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1142

ZDI-CAN-24030

Adobe

CVE-2024-20789

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1141

ZDI-CAN-24027

Adobe

CVE-2024-34125

Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1140

ZDI-CAN-24028

Adobe

CVE-2024-34126

Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1139

ZDI-CAN-24057

Adobe

CVE-2024-39386

Adobe Bridge AVI FIle Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1138

ZDI-CAN-24607

Adobe

CVE-2024-41840

Adobe Bridge JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1137

ZDI-CAN-24047

Adobe

CVE-2024-39387

Adobe Bridge AVI FIle Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1136

ZDI-CAN-24182

Adobe

CVE-2024-39423

Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1135

ZDI-CAN-24090

Adobe

CVE-2024-39422

Adobe Acrobat Reader DC AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1134

ZDI-CAN-24309

Adobe

CVE-2024-39424

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1133

ZDI-CAN-24569

Adobe

CVE-2024-41831

Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1132

ZDI-CAN-24310

Adobe

CVE-2024-41833

Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1131

ZDI-CAN-24311

Adobe

CVE-2024-41834

Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1130

ZDI-CAN-24312

Adobe

CVE-2024-39426

Adobe Acrobat Reader DC Annotation Memory Corruption Remote Code Execution Vulnerability

ZDI-24-1129

ZDI-CAN-23964

Magnet Forensics

CVE-2024-7448

Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability

ZDI-24-1128

ZDI-CAN-23326

Samsung

CVE-2024-7399

Samsung MagicINFO 9 Server getFileFromMultipartFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1127

ZDI-CAN-23928

Foxit

CVE-2024-7725

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1126

ZDI-CAN-23900

Foxit

CVE-2024-7724

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1125

ZDI-CAN-23736

Foxit

CVE-2024-7723

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1124

ZDI-CAN-23702

Foxit

CVE-2024-7722

Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability

ZDI-24-1123

ZDI-CAN-22458

QNAP

CVE-2024-32765

(Pwn2Own) QNAP TS-464 Netmgr Endpoint Command Injection Remote Code Execution Vulnerability

ZDI-24-1122

ZDI-CAN-23588

Apple

CVE-2024-27829

Apple macOS VideoToolbox Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1121

ZDI-CAN-23591

Apple

CVE-2024-27829

Apple macOS VideoToolbox Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1120

ZDI-CAN-24130

Apple

CVE-2024-27829

Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1119

ZDI-CAN-24059

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1118

ZDI-CAN-24060

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1117

ZDI-CAN-24063

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1116

ZDI-CAN-24066

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1115

ZDI-CAN-24069

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1114

ZDI-CAN-24062

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1113

ZDI-CAN-24064

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1112

ZDI-CAN-24065

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1111

ZDI-CAN-24067

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1110

ZDI-CAN-24035

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1109

ZDI-CAN-24037

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1108

ZDI-CAN-24036

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1107

ZDI-CAN-24038

Apple

CVE-2024-27857

Apple macOS AMDRadeonX6000MTLDriver KTX Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1106

ZDI-CAN-25026

Logsign

CVE-2024-7601

Logsign Unified SecOps Platform Directory data_export_delete_all Traversal Arbitrary File Deletion Vulnerability

ZDI-24-1105

ZDI-CAN-25028

Logsign

CVE-2024-7603

Logsign Unified SecOps Platform Directory Traversal Arbitrary Directory Deletion Vulnerability

ZDI-24-1104

ZDI-CAN-25029

Logsign

CVE-2024-7604

Logsign Unified SecOps Platform Incorrect Authorization Authentication Bypass Vulnerability

ZDI-24-1103

ZDI-CAN-25025

Logsign

CVE-2024-7600

Logsign Unified SecOps Platform Directory Traversal Arbitrary File Deletion Vulnerability

ZDI-24-1102

ZDI-CAN-25027

Logsign

CVE-2024-7602

Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability

ZDI-24-1101

ZDI-CAN-22578

Apple

CVE-2024-27802

Apple macOS Metal Framework KTX Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1100

ZDI-CAN-19060

SMARTBEAR

CVE-2024-7565

SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1099

ZDI-CAN-24775

Apache

CVE-2024-38856

Apache OFBiz resolveURI Authentication Bypass Vulnerability

ZDI-24-1098

ZDI-CAN-22870

Microsoft

 

(0Day) Microsoft Windows Error Reporting Service Missing Authorization Arbitrary Process Termination Vulnerability

ZDI-24-1097

ZDI-CAN-22453

Microsoft

 

(0Day) Microsoft GitHub Dev-Containers Improper Privilege Management Privilege Escalation Vulnerability

ZDI-24-1096

ZDI-CAN-22344

Microsoft

 

(0Day) Microsoft Office Visio EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1095

ZDI-CAN-22326

Microsoft

 

(0Day) Microsoft Office Visio DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1094

ZDI-CAN-22291

Microsoft

 

(0Day) Microsoft Office Visio EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1093

ZDI-CAN-22290

Microsoft

 

(0Day) Microsoft Office Visio EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1092

ZDI-CAN-22289

Microsoft

 

(0Day) Microsoft Office Visio DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1091

ZDI-CAN-20572

Microsoft

 

(0Day) Microsoft Windows DirectComposition Out-Of-Bounds Read Denial-of-Service Vulnerability

ZDI-24-1090

ZDI-CAN-20571

Microsoft

 

(0Day) Microsoft Windows DirectComposition Null Pointer Dereference Denial-of-Service Vulnerability

ZDI-24-1089

ZDI-CAN-20166

Microsoft

 

(0Day) Microsoft Office Visio DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1088

ZDI-CAN-19051

Microsoft

 

(0Day) Microsoft 3D Viewer GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1087

ZDI-CAN-23460

oFono

CVE-2024-7547

(0Day) oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-24-1086

ZDI-CAN-23459

oFono

CVE-2024-7546

(0Day) oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-24-1085

ZDI-CAN-23458

oFono

CVE-2024-7545

(0Day) oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-24-1084

ZDI-CAN-23457

oFono

CVE-2024-7544

(0Day) oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-24-1083

ZDI-CAN-23456

oFono

CVE-2024-7543

(0Day) oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-24-1082

ZDI-CAN-23309

oFono

CVE-2024-7542

(0Day) (Pwn2Own) oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability

ZDI-24-1081

ZDI-CAN-23308

oFono

CVE-2024-7541

(0Day) (Pwn2Own) oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability

ZDI-24-1080

ZDI-CAN-23307

oFono

CVE-2024-7540

(0Day) (Pwn2Own) oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability

ZDI-24-1079

ZDI-CAN-23195

oFono

CVE-2024-7539

(0Day) (Pwn2Own) oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability

ZDI-24-1078

ZDI-CAN-23190

oFono

CVE-2024-7538

(0Day) (Pwn2Own) oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability

ZDI-24-1077

ZDI-CAN-23157

oFono

CVE-2024-7537

(0Day) (Pwn2Own) oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1076

ZDI-CAN-23414

Microsoft

CVE-2024-30082

Microsoft Windows Menu DC Color Space Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-1075

ZDI-CAN-23296

Microsoft

 

Microsoft PowerShell Reference for Office Products officedocs-cdn Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1074

ZDI-CAN-23295

Microsoft

 

Microsoft PowerShell Gallery psg-prod-centralus Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1073

ZDI-CAN-23269

Microsoft

 

Microsoft Azure uAMQP azure-iot-sdks-ci Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1072

ZDI-CAN-23258

Microsoft

 

Microsoft CameraTraps cameratracrsppftkje Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1071

ZDI-CAN-23234

Microsoft

 

Microsoft Azure GPT ALE palantirdemoacr Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1070

ZDI-CAN-23075

Microsoft

 

Microsoft Partner Resources openhacks Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1069

ZDI-CAN-23067

Microsoft

 

Microsoft Technical Case Studies athena-dashboard Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1068

ZDI-CAN-23066

Microsoft

 

Microsoft Azure ML.NET Samples mlnetfilestorage Uncontrolled Search Path Element Vulnerability

ZDI-24-1067

ZDI-CAN-23055

Microsoft

 

Microsoft Azure CollectSFData docs-analytics-eus Uncontrolled Search Path Element Impersonation Vulnerability

ZDI-24-1066

ZDI-CAN-23054

Microsoft

 

Microsoft Azure DataStoriesSamples machinelearningdatasets Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1065

ZDI-CAN-23041

Microsoft

 

Microsoft Azure Availability Monitor for Kafka esnewdeveastdockerregistry Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1064

ZDI-CAN-23029

Microsoft

 

Microsoft AirSim airsimci Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1063

ZDI-CAN-23028

Microsoft

 

Microsoft Reactor Workshops reactorworkshops Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1062

ZDI-CAN-23027

Microsoft

 

Microsoft Fluid Framework prague Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1061

ZDI-CAN-23026

Microsoft

 

Microsoft What The Hack docsmsftpdfs Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1060

ZDI-CAN-23023

Microsoft

 

Microsoft Azure Aztack aztack1528763526 Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1059

ZDI-CAN-23022

Microsoft

 

Microsoft Azure Linux Automation konkaciwestus1 Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1058

ZDI-CAN-23021

Microsoft

 

Microsoft Azure NodeJS LogPoint logpointsassets Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-1057

ZDI-CAN-23000

Trimble

CVE-2024-7511

Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1056

ZDI-CAN-19631

Trimble

CVE-2024-7510

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-1055

ZDI-CAN-19576

Trimble

CVE-2024-7509

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1054

ZDI-CAN-19575

Trimble

CVE-2024-7508

Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1053

ZDI-CAN-23317

ChargePoint

CVE-2024-23971

(0Day) (Pwn2Own) ChargePoint Home Flex OCPP bswitch Command Injection Remote Code Execution Vulnerability

ZDI-24-1052

ZDI-CAN-23229

ChargePoint

CVE-2024-23970

(0Day) (Pwn2Own) ChargePoint Home Flex Improper Certificate Validation Vulnerability

ZDI-24-1051

ZDI-CAN-23313

ChargePoint

CVE-2024-23969

(0Day) (Pwn2Own) ChargePoint Home Flex wlanchnllst Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1050

ZDI-CAN-23222

ChargePoint

CVE-2024-23968

(0Day) (Pwn2Own) ChargePoint Home Flex SrvrToSmSetAutoChnlListMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-1049

ZDI-CAN-23300

ChargePoint

CVE-2024-23921

(0Day) (Pwn2Own) ChargePoint Home Flex wlanapp Command Injection Remote Code Execution Vulnerability

ZDI-24-1048

ZDI-CAN-23150

ChargePoint

CVE-2024-23920

(0Day) (Pwn2Own) ChargePoint Home Flex onboardee Improper Access Control Remote Code Execution Vulnerability

ZDI-24-1047

ZDI-CAN-21455

ChargePoint

CVE-2024-7392

(0Day) ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability

ZDI-24-1046

ZDI-CAN-21454

ChargePoint

CVE-2024-7391

(0Day) ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability

ZDI-24-1045

ZDI-CAN-23101

Pioneer

CVE-2024-23928

(0Day) (Pwn2Own) Pioneer DMH-WT7600NEX Telematics Improper Certificate Validation Vulnerability

ZDI-24-1044

ZDI-CAN-23301

Pioneer

CVE-2024-23929

(0Day) (Pwn2Own) Pioneer DMH-WT7600NEX Telematics Directory Traversal Arbitrary File Creation Vulnerability

ZDI-24-1043

ZDI-CAN-23302

Pioneer

CVE-2024-23930

(0Day) (Pwn2Own) Pioneer DMH-WT7600NEX Media Service Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability

ZDI-24-1042

ZDI-CAN-24039

NoMachine

CVE-2024-7253

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZDI-24-1041

ZDI-CAN-20781

Google

CVE-2023-7261

Google Chrome Updater DosDevices Local Privilege Escalation Vulnerability

ZDI-24-1040

ZDI-CAN-24127

Apple

CVE-2024-27877

Apple macOS AppleVADriver Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1039

ZDI-CAN-23757

PaperCut

CVE-2024-8404

PaperCut NG web-print-hot-folder Link Following Local Privilege Escalation Vulnerability

ZDI-24-1038

ZDI-CAN-20972

PaperCut

CVE-2024-3037

PaperCut NG pc-web-print Link Following Local Privilege Escalation Vulnerability

ZDI-24-1037

ZDI-CAN-23550

PDF-XChange

CVE-2024-7352

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-1036

ZDI-CAN-21677

Check Point

CVE-2024-6233

Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability

ZDI-24-1035

ZDI-CAN-22668

Microsoft

CVE-2024-21371

Microsoft Windows NTFS Junction Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-24-1034

ZDI-CAN-23673

Oracle

CVE-2024-21164

Oracle VirtualBox EHCI USB Controller Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-1033

ZDI-CAN-23183

NI

CVE-2024-6122

NI FlexLogger Redis Server Incorrect Permission Assignment Information Disclosure Vulnerability

ZDI-24-1032

ZDI-CAN-21802

NI

CVE-2024-6121

NI FlexLogger Redis Local Privilege Escalation Vulnerability

ZDI-24-1031

ZDI-CAN-21927

NI

CVE-2024-6675

NI VeriStand NIVSPRJ File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1030

ZDI-CAN-22009

NI

CVE-2024-6791

NI VeriStand VSMODEL File Parsing Directory Traversal Remote Code Execution Vulnerability

ZDI-24-1029

ZDI-CAN-22068

NI

CVE-2024-6793

NI VeriStand DataLoggingServer Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1028

ZDI-CAN-22069

NI

CVE-2024-6794

NI VeriStand WaveformStreamingServer Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-1027

ZDI-CAN-22106

NI

CVE-2024-6806

NI VeriStand ProjectServer OpenTool Exposed Dangerous Method Remote Code Execution Vulnerability

ZDI-24-1026

ZDI-CAN-22162

NI

CVE-2024-6806

NI VeriStand ProjectServer Exposed Dangerous Method Remote Code Execution Vulnerability

ZDI-24-1025

ZDI-CAN-22070

NI

CVE-2024-6805

NI VeriStand IFileTransferServer Exposed Dangerous Method Information Disclosure Vulnerability

ZDI-24-1024

ZDI-CAN-22167

NI

CVE-2024-6805

NI VeriStand ProjectServer Exposed Dangerous Method Denial-of-Service Vulnerability

ZDI-24-1023

ZDI-CAN-22717

Trend Micro

CVE-2024-41183

Trend Micro VPN Proxy One Pro Link Following Local Privilege Escalation Vulnerability

ZDI-24-1022

ZDI-CAN-22716

Trend Micro

CVE-2024-41183

Trend Micro VPN Proxy One Pro Link Following Local Privilege Escalation Vulnerability

ZDI-24-1021

ZDI-CAN-24680

Logsign

CVE-2024-7564

Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability

ZDI-24-1020

ZDI-CAN-23514

SolarWinds

CVE-2024-28992

SolarWinds Access Rights Manager deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

ZDI-24-1019

ZDI-CAN-23779

Docker

CVE-2024-6222

(Pwn2Own) Docker Desktop extension-manager Exposed Dangerous Function Privilege Escalation Vulnerability

ZDI-24-1018

ZDI-CAN-23851

Linux

CVE-2024-35880

(Pwn2Own) Linux Kernel io_uring Buffer List Race Condition Local Privilege Escalation Vulnerability

ZDI-24-1017

ZDI-CAN-23402

Panda Security

CVE-2024-7242

(0Day) Panda Security Dome Link Following Local Privilege Escalation Vulnerability

ZDI-24-1016

ZDI-CAN-23375

Panda Security

CVE-2024-7241

(0Day) Panda Security Dome Link Following Local Privilege Escalation Vulnerability

ZDI-24-1015

ZDI-CAN-23429

Panda Security

CVE-2024-7245

(0Day) Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI-24-1014

ZDI-CAN-23428

Panda Security

CVE-2024-7244

(0Day) Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability

ZDI-24-1013

ZDI-CAN-23413

Panda Security

CVE-2024-7243

(0Day) Panda Security Dome Link Following Local Privilege Escalation Vulnerability

ZDI-24-1012

ZDI-CAN-23005

F-Secure

CVE-2024-7240

(0Day) F-Secure Total Link Following Local Privilege Escalation Vulnerability

ZDI-24-1011

ZDI-CAN-22238

VIPRE

CVE-2024-7238

(0Day) VIPRE Advanced Security SBAMSvc Link Following Local Privilege Escalation Vulnerability

ZDI-24-1010

ZDI-CAN-22314

VIPRE

CVE-2024-7239

(0Day) VIPRE Advanced Security Link Following Local Privilege Escalation Vulnerability

ZDI-24-1009

ZDI-CAN-22942

AVG

CVE-2024-7236

AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability

ZDI-24-1008

ZDI-CAN-22260

AVG

CVE-2024-7234

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability

ZDI-24-1007

ZDI-CAN-22960

AVG

CVE-2024-7237

AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability

ZDI-24-1006

ZDI-CAN-22803

AVG

CVE-2024-7235

AVG AntiVirus Free Link Following Denial-of-Service Vulnerability

ZDI-24-1005

ZDI-CAN-23731

Avast

CVE-2024-7233

(0Day) Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability

ZDI-24-1004

ZDI-CAN-22963

Avast

CVE-2024-7232

(0Day) Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability

ZDI-24-1003

ZDI-CAN-22272

Avast

CVE-2024-7227

(0Day) Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability

ZDI-24-1002

ZDI-CAN-22892

Avast

CVE-2024-7229

(0Day) Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability

ZDI-24-1001

ZDI-CAN-22894

Avast

CVE-2024-7231

(0Day) Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability

ZDI-24-1000

ZDI-CAN-22893

Avast

CVE-2024-7230

(0Day) Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability

ZDI-24-999

ZDI-CAN-22806

Avast

CVE-2024-7228

(0Day) Avast Free Antivirus Link Following Denial-of-Service Vulnerability

ZDI-24-998

ZDI-CAN-22317

KernelCI

 

KernelCI SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

ZDI-24-997

ZDI-CAN-22869

Linux

CVE-2024-0565

Linux Kernel CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability

ZDI-24-996

ZDI-CAN-22271

Linux

CVE-2023-52755

Linux Kernel ksmbd ACL Inheritance Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-995

ZDI-CAN-21202

Linux

CVE-2023-39197

Linux Kernel Netfilter Conntrack Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-994

ZDI-CAN-20940

Linux

CVE-2023-39198

Linux Kernel QXL VGA Driver Race Condition Local Privilege Escalation Vulnerability

ZDI-24-993

ZDI-CAN-23299

Microsoft

 

Microsoft Azure myapiendpoint.developer.azure-api Improper Access Control Information Disclosure Vulnerability

ZDI-24-992

ZDI-CAN-23542

Microsoft

 

Microsoft Azure VSTS CLI vstscli Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-991

ZDI-CAN-23522

Microsoft

 

Microsoft Azure Arc Jumpstart Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-990

ZDI-CAN-19131

Microsoft

 

Microsoft 3D Builder GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-989

ZDI-CAN-23298

Microsoft

 

Microsoft Azure Container Network Management sbidprod Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-988

ZDI-CAN-23268

Microsoft

 

Microsoft Azure MQTT azure-iot-sdks-ci Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-987

ZDI-CAN-23259

Microsoft

 

Microsoft Object Detection Solution Accelerator csaddevamlacr Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-986

ZDI-CAN-23235

Microsoft

 

Microsoft Azure IoT Edge Dev Tool iotedgetoolscontainerregistry Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-985

ZDI-CAN-23050

Microsoft

 

Microsoft Azure Service Fabric servicefabricsdkstorage Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-984

ZDI-CAN-18535

Microsoft

 

Microsoft Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-983

ZDI-CAN-23036

Microsoft

 

Microsoft Azure Go Labs microsoftgoproxy Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-982

ZDI-CAN-23025

Microsoft

 

Microsoft Azure SQL Workshop azuremlsampleexperiments Uncontrolled Search Path Element Vulnerability

ZDI-24-981

ZDI-CAN-23020

Microsoft

 

Microsoft Azure Machine Learning Notebooks azuremlpackages Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-980

ZDI-CAN-23019

Microsoft

 

Microsoft Azure Machine Learning Forecasting Toolkit azuremlftkrelease Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-979

ZDI-CAN-19066

Microsoft

 

Microsoft Office Visio DXF File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-24-978

ZDI-CAN-22503

Microsoft

 

Microsoft PC Manager Link Following Local Privilege Escalation Vulnerability

ZDI-24-977

ZDI-CAN-22158

Microsoft

 

Microsoft Office Excel XLW File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-976

ZDI-CAN-20982

Microsoft

 

Microsoft Office PowerPoint GLB File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-975

ZDI-CAN-18381

Microsoft

 

Microsoft Excel FBX File Parsing Use-After-Free Information Disclosure Vulnerability

ZDI-24-974

ZDI-CAN-23261

IrfanView

CVE-2024-6822

IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-973

ZDI-CAN-23260

IrfanView

CVE-2024-6821

IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-972

ZDI-CAN-23232

IrfanView

CVE-2024-6820

IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-971

ZDI-CAN-23219

IrfanView

CVE-2024-6819

IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-970

ZDI-CAN-23217

IrfanView

CVE-2024-6818

IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-969

ZDI-CAN-23216

IrfanView

CVE-2024-6817

IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-968

ZDI-CAN-23214

IrfanView

CVE-2024-6816

IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-967

ZDI-CAN-23159

IrfanView

CVE-2024-6815

IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-966

ZDI-CAN-23533

Docker

CVE-2024-5652

Docker Desktop Daemon CLI External Control of File Path Denial-of-Service Vulnerability

ZDI-24-965

ZDI-CAN-23325

Apple

CVE-2024-27829

Apple macOS VideoToolbox Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-964

ZDI-CAN-23904

Autodesk

CVE-2024-23147

Autodesk AutoCAD STEP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-963

ZDI-CAN-23840

Autodesk

CVE-2024-23146

Autodesk AutoCAD X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-962

ZDI-CAN-23830

Autodesk

CVE-2024-23146

Autodesk AutoCAD X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-961

ZDI-CAN-23772

Autodesk

CVE-2024-23147

Autodesk AutoCAD X_B File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-960

ZDI-CAN-23846

Autodesk

CVE-2024-23152

Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-959

ZDI-CAN-23839

Autodesk

CVE-2024-37007

Autodesk AutoCAD X_T File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-958

ZDI-CAN-23829

Autodesk

CVE-2024-37005

Autodesk AutoCAD X_T File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-957

ZDI-CAN-22831

Comodo

CVE-2024-7252

(0Day) Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability

ZDI-24-956

ZDI-CAN-22832

Comodo

CVE-2024-7251

(0Day) Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability

ZDI-24-955

ZDI-CAN-22829

Comodo

CVE-2024-7250

(0Day) Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability

ZDI-24-954

ZDI-CAN-21794

Comodo

CVE-2024-7249

(0Day) Comodo Firewall Link Following Local Privilege Escalation Vulnerability

ZDI-24-953

ZDI-CAN-19055

Comodo

CVE-2024-7248

(0Day) Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability

ZDI-24-952

ZDI-CAN-23926

Delta Electronics

CVE-2024-39881

Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-951

ZDI-CAN-23925

Delta Electronics

CVE-2024-39883

Delta Electronics CNCSoft-G2 DPAX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-950

ZDI-CAN-23924

Delta Electronics

CVE-2024-39881

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-949

ZDI-CAN-23923

Delta Electronics

CVE-2024-39883

Delta Electronics CNCSoft-G2 DPAX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-948

ZDI-CAN-23920

Delta Electronics

CVE-2024-39882

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-947

ZDI-CAN-23919

Delta Electronics

CVE-2024-39881

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-946

ZDI-CAN-23918

Delta Electronics

CVE-2024-39881

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-945

ZDI-CAN-23917

Delta Electronics

CVE-2024-39881

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-944

ZDI-CAN-23916

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-943

ZDI-CAN-23915

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-942

ZDI-CAN-23914

Delta Electronics

CVE-2024-39882

Delta Electronics CNCSoft-G2 DPAX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-941

ZDI-CAN-23842

Delta Electronics

CVE-2024-39881

Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-940

ZDI-CAN-23841

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-939

ZDI-CAN-23832

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-938

ZDI-CAN-23831

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-937

ZDI-CAN-23811

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-936

ZDI-CAN-23809

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-935

ZDI-CAN-23807

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-934

ZDI-CAN-23770

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-933

ZDI-CAN-23769

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-932

ZDI-CAN-23767

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-931

ZDI-CAN-23766

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-930

ZDI-CAN-23765

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-929

ZDI-CAN-23764

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-928

ZDI-CAN-23763

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-927

ZDI-CAN-23648

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-926

ZDI-CAN-23581

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-925

ZDI-CAN-23580

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-924

ZDI-CAN-23579

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-923

ZDI-CAN-23578

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-922

ZDI-CAN-23577

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 CMT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-921

ZDI-CAN-23576

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-920

ZDI-CAN-23575

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-919

ZDI-CAN-23574

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-918

ZDI-CAN-23573

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-917

ZDI-CAN-23572

Delta Electronics

CVE-2024-39880

Delta Electronics CNCSoft-G2 ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-916

ZDI-CAN-23061

SolarWinds

CVE-2024-23475

SolarWinds Access Rights Manager AddReportResult Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

ZDI-24-915

ZDI-CAN-23062

SolarWinds

CVE-2024-23472

SolarWinds Access Rights Manager AddGeneratedReport Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

ZDI-24-914

ZDI-CAN-23063

SolarWinds

CVE-2024-23474

SolarWinds Access Rights Manager deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

ZDI-24-913

ZDI-CAN-23060

SolarWinds

CVE-2024-23468

SolarWinds Access Rights Manager deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

ZDI-24-912

ZDI-CAN-23039

SolarWinds

CVE-2024-23469

SolarWinds Access Rights Manager EndUpdate Exposed Dangerous Method Remote Code Execution Vulnerability

ZDI-24-911

ZDI-CAN-22712

SolarWinds

CVE-2024-23470

SolarWinds Access Rights Manager UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability

ZDI-24-910

ZDI-CAN-22711

SolarWinds

CVE-2024-23471

SolarWinds Access Rights Manager CreateFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-909

ZDI-CAN-22697

SolarWinds

CVE-2024-23467

SolarWinds Access Rights Manager ExpandZipFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-908

ZDI-CAN-22681

SolarWinds

CVE-2024-23466

SolarWinds Access Rights Manager Connect Method Directory Traversal Remote Code Execution Vulnerability

ZDI-24-907

ZDI-CAN-23053

SolarWinds

CVE-2024-23465

SolarWinds Access Rights Manager ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability

ZDI-24-906

ZDI-CAN-22554

SolarWinds

CVE-2024-28074

SolarWinds Access Rights Manager createGlobalServerChannelInternal Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-905

ZDI-CAN-23515

SolarWinds

CVE-2024-28992

SolarWinds Access Rights Manager deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

ZDI-24-904

ZDI-CAN-23273

IrfanView

CVE-2024-6812

IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-903

ZDI-CAN-24192

IrfanView

CVE-2024-6811

IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-902

ZDI-CAN-23207

NETGEAR

CVE-2024-6813

NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability

ZDI-24-901

ZDI-CAN-23399

NETGEAR

CVE-2024-6814

NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability

ZDI-24-900

ZDI-CAN-19105

Parse

CVE-2024-27298

Parse Server literalizeRegexPart SQL Injection Information Disclosure Vulnerability

ZDI-24-899

ZDI-CAN-23078

Centreon

CVE-2024-39841

Centreon testServiceExistence SQL Injection Remote Code Execution Vulnerability

ZDI-24-898

ZDI-CAN-23314

ESET

CVE-2024-2003

ESET Smart Security Premium Link Following Local Privilege Escalation Vulnerability

ZDI-24-897

ZDI-CAN-22968

Trend Micro

CVE-2024-39753

Trend Micro Apex One modOSCE SQL Injection Remote Code Execution Vulnerability

ZDI-24-896

ZDI-CAN-23894

Parse

CVE-2024-39309

Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

ZDI-24-895

ZDI-CAN-22319

Progress Software

CVE-2024-5008

Progress Software WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-894

ZDI-CAN-23913

Progress Software

CVE-2024-4884

Progress Software WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-893

ZDI-CAN-24003

Progress Software

CVE-2024-4885

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

ZDI-24-892

ZDI-CAN-23663

Progress Software

CVE-2024-4883

Progress Software WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-891

ZDI-CAN-23668

Progress Software

CVE-2024-5016

Progress Software WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-890

ZDI-CAN-23670

Progress Software

CVE-2024-5015

Progress Software WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerability

ZDI-24-889

ZDI-CAN-23869

Progress Software

CVE-2024-5013

Progress Software WhatsUp Gold InstallController Denial-of-Service Vulnerability

ZDI-24-888

ZDI-CAN-23659

Progress Software

CVE-2024-5015

Progress Software WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability

ZDI-24-887

ZDI-CAN-23564

Progress Software

CVE-2024-5014

Progress Software WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure Vulnerability

ZDI-24-886

ZDI-CAN-24004

Progress Software

CVE-2024-5009

Progress Software WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability

ZDI-24-885

ZDI-CAN-23760

Progress Software

CVE-2024-5018

Progress Software WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability

ZDI-24-884

ZDI-CAN-23874

Progress Software

CVE-2024-5019

Progress Software WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability

ZDI-24-883

ZDI-CAN-21408

Zen Cart

CVE-2024-5762

Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability

ZDI-24-882

ZDI-CAN-20007

VMware

CVE-2024-37087

VMware vCenter Server Appliance License Server Uncontrolled Memory Allocation Denial-of-Service Vulnerability

ZDI-24-881

ZDI-CAN-23318

Ubiquiti Networks

CVE-2024-29206

(Pwn2Own) Ubiquiti Networks EV Station setDebugPortEnabled Exposed Dangerous Method Remote Code Execution Vulnerability

ZDI-24-880

ZDI-CAN-23187

Ubiquiti Networks

CVE-2024-29207

(Pwn2Own) Ubiquiti Networks EV Station EVCLauncher Improper Certificate Validation Vulnerability

ZDI-24-879

ZDI-CAN-23186

Ubiquiti Networks

CVE-2024-29208

(Pwn2Own) Ubiquiti Networks EV Station changeUserPassword Missing Authentication Remote Code Execution Vulnerability

ZDI-24-878

ZDI-CAN-23319

Sony

CVE-2024-23922

Sony XAV-AX5500 Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability

ZDI-24-877

ZDI-CAN-23238

Sony

CVE-2024-23933

(Pwn2Own) Sony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-876

ZDI-CAN-23185

Sony

CVE-2024-23972

(Pwn2Own) Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-875

ZDI-CAN-22994

Sony

CVE-2024-23934

(Pwn2Own) Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-874

ZDI-CAN-22939

Sony

CVE-2024-23922

(Pwn2Own) Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability

ZDI-24-873

ZDI-CAN-23396

Silicon Labs

CVE-2024-23973

(Pwn2Own) Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-872

ZDI-CAN-23392

Silicon Labs

CVE-2025-2838

(Pwn2Own) Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability

ZDI-24-871

ZDI-CAN-23245

Silicon Labs

CVE-2025-2837

(Pwn2Own) Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-870

ZDI-CAN-23226

Silicon Labs

CVE-2024-24731

(Pwn2Own) Silicon Labs Gecko OS http_download Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-869

ZDI-CAN-23189

Silicon Labs

CVE-2024-23937

(Pwn2Own) Silicon Labs Gecko OS Debug Interface Format String Information Disclosure Vulnerability

ZDI-24-868

ZDI-CAN-23184

Silicon Labs

CVE-2024-23938

(Pwn2Own) Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-867

ZDI-CAN-24096

Phoenix Contact

CVE-2024-25994

(Pwn2Own) Phoenix Contact CHARX SEC-3100 CharxUpdateAgent Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-866

ZDI-CAN-24095

Phoenix Contact

CVE-2024-26004

(Pwn2Own) Phoenix Contact CHARX SEC-3100 CANopenDevice Null Pointer Dereference Denial-of-Service Vulnerability

ZDI-24-865

ZDI-CAN-21407

Phoenix Contact

CVE-2024-25999

Phoenix Contact CHARX SEC-3100 charx_pack_logs Improper Input Validation Local Privilege Escalation Vulnerability

ZDI-24-864

ZDI-CAN-23320

Phoenix Contact

CVE-2024-25998

(Pwn2Own) Phoenix Contact CHARX SEC-3100 OCPP Protocol UpdateFirmware Command Injection Remote Code Execution Vulnerability

ZDI-24-863

ZDI-CAN-23305

Phoenix Contact

CVE-2024-26002

(Pwn2Own) Phoenix Contact CHARX SEC-3100 plctool Improper Privilege Management Local Privilege Escalation Vulnerability

ZDI-24-862

ZDI-CAN-23304

Phoenix Contact

CVE-2024-26001

(Pwn2Own) Phoenix Contact CHARX SEC-3100 MQTT Protocol JSON Parsing Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-861

ZDI-CAN-23303

Phoenix Contact

CVE-2024-26005

(Pwn2Own) Phoenix Contact CHARX SEC-3100 ClientSession Use-After-Free Remote Code Execution Vulnerability

ZDI-24-860

ZDI-CAN-23244

Phoenix Contact

CVE-2024-26003

(Pwn2Own) Phoenix Contact CHARX SEC-3100 HomePlug Protocol Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-859

ZDI-CAN-23239

Phoenix Contact

CVE-2024-26000

(Pwn2Own) Phoenix Contact CHARX SEC-3100 MTQQ Protocol JSON Parsing Type Confusion Information Disclosure Vulnerability

ZDI-24-858

ZDI-CAN-23225

Phoenix Contact

CVE-2024-26288

(Pwn2Own) Phoenix Contact CHARX SEC-3100 OCPP Protocol Missing Encryption Authentication Bypass Vulnerability

ZDI-24-857

ZDI-CAN-23221

Phoenix Contact

CVE-2024-25996

(Pwn2Own) Phoenix Contact CHARX SEC-3100 Improper Access Control Firewall Bypass Vulnerability

ZDI-24-856

ZDI-CAN-23158

Phoenix Contact

CVE-2024-25995

(Pwn2Own) Phoenix Contact CHARX SEC-3100 Config Manager Improper Input Validation Remote Code Execution Vulnerability

ZDI-24-855

ZDI-CAN-23321

Phoenix Contact

CVE-2024-25997

(Pwn2Own) Phoenix Contact CHARX SEC-3100 OCPP Protocol Improper Log Output Neutralization Remote Code Execution Vulnerability

ZDI-24-854

ZDI-CAN-23241

Autel

CVE-2024-23957

(Pwn2Own) Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-853

ZDI-CAN-23230

Autel

CVE-2024-23967

(Pwn2Own) Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-852

ZDI-CAN-23196

Autel

CVE-2024-23958

(Pwn2Own) Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability

ZDI-24-851

ZDI-CAN-23194

Autel

CVE-2024-23959

(Pwn2Own) Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-850

ZDI-CAN-23312

Alpine

CVE-2024-23963

(Pwn2Own) Alpine Halo9 Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-849

ZDI-CAN-23306

Alpine

CVE-2024-23961

(Pwn2Own) Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution Vulnerability

ZDI-24-848

ZDI-CAN-23249

Alpine

CVE-2024-23935

(Pwn2Own) Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-847

ZDI-CAN-23246

Alpine

CVE-2024-23962

(Pwn2Own) Alpine Halo9 Missing Authentication Information Disclosure Vulnerability

ZDI-24-846

ZDI-CAN-23105

Alpine

CVE-2024-23924

(Pwn2Own) Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability

ZDI-24-845

ZDI-CAN-23102

Alpine

CVE-2024-23960

(Pwn2Own) Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability

ZDI-24-844

ZDI-CAN-22945

Alpine

CVE-2024-23923

(Pwn2Own) Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability

ZDI-24-843

ZDI-CAN-22273

Linux

 

Linux Kernel USB/IP VHCI Driver Race Condition Privilege Escalation Vulnerability

ZDI-24-842

ZDI-CAN-22579

Linux

CVE-2023-6200

Linux Kernel ICMPv6 Router Advertisement Race Condition Remote Code Execution Vulnerability

ZDI-24-841

ZDI-CAN-21491

Zope

 

(0Day) Zope CMFCore Uncontrolled Resource Consumption Denial-of-Service Vulnerability

ZDI-24-840

ZDI-CAN-22419

Wyze

CVE-2024-6249

(Pwn2Own) Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-839

ZDI-CAN-22393

Wyze

CVE-2024-6248

(Pwn2Own) Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability

ZDI-24-838

ZDI-CAN-22337

Wyze

CVE-2024-6247

(Pwn2Own) Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability

ZDI-24-837

ZDI-CAN-22310

Wyze

CVE-2024-6246

(Pwn2Own) Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-836

ZDI-CAN-22461

Synology

 

(Pwn2Own) Synology BC500 update_ntp_config Command Injection Remote Code Execution Vulnerability

ZDI-24-835

ZDI-CAN-22460

Synology

CVE-2024-39352

(Pwn2Own) Synology BC500 Protection Mechanism Failure Software Downgrade Vulnerability

ZDI-24-834

ZDI-CAN-22311

Synology

CVE-2024-39350

(Pwn2Own) Synology BC500 Improper Compartmentalization Local Privilege Escalation Vulnerability

ZDI-24-833

ZDI-CAN-22418

Synology

CVE-2024-39349

(Pwn2Own) Synology BC500 synocam_param.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-832

ZDI-CAN-22430

Synology

CVE-2024-39347

(Pwn2Own) Synology RT6600ax Improper Access Control Firewall Bypass Vulnerability

ZDI-24-831

ZDI-CAN-22404

Samsung

 

(Pwn2Own) Samsung Galaxy S23 Galaxy Store Deeplink Permissive List of Allowed Inputs Remote Code Execution Vulnerability

ZDI-24-830

ZDI-CAN-22368

Samsung

CVE-2023-42581

(Pwn2Own) Samsung Galaxy S23 Instant Plays Improper Input Validation Remote Code Execution Vulnerability

ZDI-24-829

ZDI-CAN-22409

Samsung

 

(Pwn2Own) Samsung Galaxy S23 McsWebViewActivity Permissive List of Allowed Inputs Remote Code Execution Vulnerability

ZDI-24-828

ZDI-CAN-22441

Samsung

CVE-2023-42580

(Pwn2Own) Samsung Galaxy S23 instantgame Improper Input Validation Remote Code Execution Vulnerability

ZDI-24-827

ZDI-CAN-22497

QNAP

CVE-2024-32766

(Pwn2Own) QNAP TS-464 username Command Injection Remote Code Execution Vulnerability

ZDI-24-826

ZDI-CAN-22496

QNAP

CVE-2024-32766

(Pwn2Own) QNAP TS-464 Improper Validation Authentication Bypass Vulnerability

ZDI-24-825

ZDI-CAN-22463

QNAP

CVE-2023-51364

(Pwn2Own) QNAP TS-464 Log Upload Command Injection Remote Code Execution Vulnerability

ZDI-24-824

ZDI-CAN-22462

QNAP

CVE-2024-27124

(Pwn2Own) QNAP TS-464 Cloud Utility Command Injection Remote Code Execution Vulnerability

ZDI-24-823

ZDI-CAN-22422

QNAP

CVE-2024-32764

(Pwn2Own) QNAP TS-464 TURN Server create_session Server-Side Request Forgery Vulnerability

ZDI-24-822

ZDI-CAN-22377

HP

CVE-2024-0794

(Pwn2Own) HP Color LaserJet Pro MFP 4301fdw CFF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-821

ZDI-CAN-23852

Linux

CVE-2024-36886

Linux Kernel TIPC Message Reassembly Use-After-Free Remote Code Execution Vulnerability

ZDI-24-820

ZDI-CAN-23441

Windscribe

CVE-2024-6141

Windscribe Directory Traversal Local Privilege Escalation Vulnerability

ZDI-24-819

ZDI-CAN-22345

VIPRE

CVE-2024-5930

VIPRE Advanced Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI-24-818

ZDI-CAN-22316

VIPRE

CVE-2024-5929

VIPRE Advanced Security PMAgent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZDI-24-817

ZDI-CAN-22315

VIPRE

CVE-2024-5928

VIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability

ZDI-24-816

ZDI-CAN-23370

Microsoft

CVE-2024-30082

Microsoft Windows Menu DC Bitmap Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-815

ZDI-CAN-23111

Toshiba

CVE-2024-3498

Toshiba e-STUDIO2518A vsftpd Incorrect Permission Assignment Privilege Escalation Vulnerability

ZDI-24-814

ZDI-CAN-23109

Toshiba

CVE-2024-3497

Toshiba e-STUDIO2518A unzip Directory Traversal Remote Code Execution Vulnerability

ZDI-24-813

ZDI-CAN-23108

Toshiba

CVE-2024-3496

Toshiba e-STUDIO2518A Authentication Bypass Vulnerability

ZDI-24-812

ZDI-CAN-22691

Hewlett Packard Enterprise

CVE-2021-40438

Hewlett Packard Enterprise OneView Apache Server-Side Request Forgery Vulnerability

ZDI-24-811

ZDI-CAN-22455

Hewlett Packard Enterprise

CVE-2023-50275

Hewlett Packard Enterprise OneView clusterService Authentication Bypass Denial-of-Service Vulnerability

ZDI-24-810

ZDI-CAN-22454

Hewlett Packard Enterprise

CVE-2023-50274

Hewlett Packard Enterprise OneView startUpgradeCommon Command Injection Local Privilege Escalation Vulnerability

ZDI-24-809

ZDI-CAN-21418

Actiontec

CVE-2024-6146

(0Day) Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-808

ZDI-CAN-21417

Actiontec

CVE-2024-6145

(0Day) Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability

ZDI-24-807

ZDI-CAN-21416

Actiontec

CVE-2024-6144

(0Day) Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-806

ZDI-CAN-21414

Actiontec

CVE-2024-6143

(0Day) Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-805

ZDI-CAN-21410

Actiontec

CVE-2024-6142

(0Day) Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-804

ZDI-CAN-20450

Parallels

CVE-2024-6154

Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-24-803

ZDI-CAN-19481

Parallels

CVE-2024-6153

Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability

ZDI-24-802

ZDI-CAN-18271

Poly

CVE-2024-6147

(0Day) Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability

ZDI-24-801

ZDI-CAN-21959

Tenable

CVE-2023-5622

Tenable Nessus Network Monitor Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZDI-24-800

ZDI-CAN-23905

Autodesk

CVE-2024-23157

(0Day) Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-799

ZDI-CAN-23897

Autodesk

CVE-2024-23156

(0Day) Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-798

ZDI-CAN-23505

Autodesk

CVE-2024-23158

(0Day) Autodesk AutoCAD IGES File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-797

ZDI-CAN-23464

Autodesk

CVE-2024-23152

(0Day) Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-796

ZDI-CAN-23431

Autodesk

CVE-2024-23156

(0Day) Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-795

ZDI-CAN-23426

Autodesk

CVE-2024-23153

(0Day) Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-794

ZDI-CAN-23409

Autodesk

CVE-2024-23159

(0Day) Autodesk AutoCAD STP File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-793

ZDI-CAN-23390

Autodesk

CVE-2024-23151

(0Day) Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-792

ZDI-CAN-23376

Autodesk

CVE-2024-23150

(0Day) Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-791

ZDI-CAN-23369

Autodesk

CVE-2024-23152

(0Day) Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-790

ZDI-CAN-23361

Autodesk

CVE-2024-23154

(0Day) Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-789

ZDI-CAN-23359

Autodesk

CVE-2024-36999

(0Day) Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-788

ZDI-CAN-23340

Autodesk

CVE-2024-23152

(0Day) Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-787

ZDI-CAN-23335

Autodesk

CVE-2024-23155

(0Day) Autodesk AutoCAD MODEL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-786

ZDI-CAN-20965

PaperCut

CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability

ZDI-24-785

ZDI-CAN-23481

PaperCut

CVE-2024-1882

PaperCut MF EmailRenderer Server-Side Template Injection Remote Code Execution Vulnerability

ZDI-24-784

ZDI-CAN-23254

PaperCut

CVE-2024-1883

PaperCut MF handleServiceException Cross-Site Scripting Authentication Bypass Vulnerability

ZDI-24-783

ZDI-CAN-23116

PaperCut

CVE-2024-1884

PaperCut MF pc-upconnector-service Server-Side Request Forgery Information Disclosure Vulnerability

ZDI-24-782

ZDI-CAN-22812

PaperCut

CVE-2024-1222

PaperCut NG PrintDeployProxyController Incorrect Authorization Authentication Bypass Vulnerability

ZDI-24-781

ZDI-CAN-22328

PaperCut

CVE-2024-1654

PaperCut NG generateNextFileName Directory Traversal Remote Code Execution Vulnerability

ZDI-24-780

ZDI-CAN-23074

PaperCut

CVE-2024-1221

PaperCut NG upload Link Following Information Disclosure Vulnerability

ZDI-24-779

ZDI-CAN-22165

PaperCut

CVE-2024-1223

PaperCut NG VendorKeys Hardcoded Credentials Authentication Bypass Vulnerability

ZDI-24-778

ZDI-CAN-22042

Linux

 

Linux Kernel USB Core Out-Of-Bounds Read Local Privilege Escalation Vulnerability

ZDI-24-777

ZDI-CAN-21826

Linux

 

Linux Kernel ksmbd Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-776

ZDI-CAN-23777

Oracle

CVE-2024-21121

(Pwn2Own) Oracle VirtualBox OHCI USB Controller Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-775

ZDI-CAN-23838

Autodesk

CVE-2024-23120

Autodesk AutoCAD STEP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-774

ZDI-CAN-23725

Autodesk

CVE-2024-23129

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-773

ZDI-CAN-23724

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-772

ZDI-CAN-23723

Autodesk

CVE-2024-23147

Autodesk AutoCAD X_B File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-771

ZDI-CAN-23722

Autodesk

CVE-2024-37005

Autodesk AutoCAD X_B File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-770

ZDI-CAN-23721

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-769

ZDI-CAN-23654

Autodesk

CVE-2024-23130

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-768

ZDI-CAN-23652

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-767

ZDI-CAN-23651

Autodesk

CVE-2024-23120

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-766

ZDI-CAN-23639

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-765

ZDI-CAN-23638

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-764

ZDI-CAN-23637

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-763

ZDI-CAN-23636

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-762

ZDI-CAN-23635

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-761

ZDI-CAN-23634

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-760

ZDI-CAN-23633

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-759

ZDI-CAN-23632

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-758

ZDI-CAN-23631

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-757

ZDI-CAN-23630

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-756

ZDI-CAN-23629

Autodesk

CVE-2024-37004

Autodesk AutoCAD SLDPRT File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-755

ZDI-CAN-23628

Autodesk

CVE-2024-23127

Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-754

ZDI-CAN-23627

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-753

ZDI-CAN-23615

Autodesk

CVE-2024-23130

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-752

ZDI-CAN-23613

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-751

ZDI-CAN-23612

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-750

ZDI-CAN-23611

Autodesk

CVE-2024-23147

Autodesk AutoCAD STEP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-749

ZDI-CAN-23610

Autodesk

CVE-2024-37000

Autodesk AutoCAD X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-748

ZDI-CAN-23560

Autodesk

CVE-2024-37000

Autodesk AutoCAD X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-747

ZDI-CAN-23559

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-746

ZDI-CAN-23535

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-745

ZDI-CAN-23512

Autodesk

CVE-2024-23137

Autodesk AutoCAD SLDPRT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-744

ZDI-CAN-23511

Autodesk

CVE-2024-23149

Autodesk AutoCAD SLDDRW File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-743

ZDI-CAN-23510

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-742

ZDI-CAN-23509

Autodesk

CVE-2024-0446

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-741

ZDI-CAN-23508

Autodesk

CVE-2024-0446

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-740

ZDI-CAN-23507

Autodesk

CVE-2024-37000

Autodesk AutoCAD X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-739

ZDI-CAN-23506

Autodesk

CVE-2024-23134

Autodesk AutoCAD IGS File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-738

ZDI-CAN-23497

Autodesk

CVE-2024-23127

Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-737

ZDI-CAN-23496

Autodesk

CVE-2024-37003

Autodesk AutoCAD SLDPRT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-736

ZDI-CAN-23495

Autodesk

CVE-2024-23130

Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-735

ZDI-CAN-23494

Autodesk

CVE-2024-23127

Autodesk AutoCAD SLDASM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-734

ZDI-CAN-23493

Autodesk

CVE-2024-23137

Autodesk AutoCAD SLDPRT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-733

ZDI-CAN-23492

Autodesk

CVE-2024-23127

Autodesk AutoCAD SLDASM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-732

ZDI-CAN-23491

Autodesk

CVE-2024-23130

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-731

ZDI-CAN-23470

Autodesk

CVE-2024-23146

Autodesk AutoCAD X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-730

ZDI-CAN-23469

Autodesk

CVE-2024-23146

Autodesk AutoCAD X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-729

ZDI-CAN-23468

Autodesk

CVE-2024-23146

Autodesk AutoCAD X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-728

ZDI-CAN-23467

Autodesk

CVE-2024-23146

Autodesk AutoCAD X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-727

ZDI-CAN-23463

Autodesk

CVE-2024-23129

Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-726

ZDI-CAN-23455

Autodesk

CVE-2024-23142

Autodesk AutoCAD MODEL File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-725

ZDI-CAN-23432

Autodesk

CVE-2024-23143

Autodesk AutoCAD X_B File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-724

ZDI-CAN-23430

Autodesk

CVE-2024-23141

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-723

ZDI-CAN-23427

Autodesk

CVE-2024-0446

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-722

ZDI-CAN-23425

Autodesk

CVE-2024-23143

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-721

ZDI-CAN-23424

Autodesk

CVE-2024-37002

Autodesk AutoCAD MODEL File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-720

ZDI-CAN-23423

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-719

ZDI-CAN-23412

Autodesk

CVE-2024-23143

Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-718

ZDI-CAN-23411

Autodesk

CVE-2024-37000

Autodesk AutoCAD X_B File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-717

ZDI-CAN-23410

Autodesk

CVE-2024-23143

Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-716

ZDI-CAN-23408

Autodesk

CVE-2024-37001

Autodesk AutoCAD 3DM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-715

ZDI-CAN-23407

Autodesk

CVE-2024-23142

Autodesk AutoCAD STP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-714

ZDI-CAN-23406

Autodesk

CVE-2024-23142

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-713

ZDI-CAN-23404

Autodesk

CVE-2024-37006

Autodesk AutoCAD CATPRODUCT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-712

ZDI-CAN-23395

Autodesk

CVE-2024-23143

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-711

ZDI-CAN-23394

Autodesk

CVE-2024-23140

Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-710

ZDI-CAN-23389

Autodesk

CVE-2024-0446

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-709

ZDI-CAN-23380

Autodesk

CVE-2024-23147

Autodesk AutoCAD CATPART File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-708

ZDI-CAN-23379

Autodesk

CVE-2024-23146

Autodesk AutoCAD X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-707

ZDI-CAN-23378

Autodesk

CVE-2024-23123

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-706

ZDI-CAN-23377

Autodesk

CVE-2024-23128

Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-705

ZDI-CAN-23365

Autodesk

CVE-2024-23142

Autodesk AutoCAD MODEL File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-704

ZDI-CAN-23364

Autodesk

CVE-2024-23140

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-703

ZDI-CAN-23363

Autodesk

CVE-2024-23145

Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-702

ZDI-CAN-23362

Autodesk

CVE-2024-23128

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-701

ZDI-CAN-23360

Autodesk

CVE-2024-0446

Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-700

ZDI-CAN-23352

Autodesk

CVE-2024-23141

Autodesk AutoCAD MODEL File Parsing Double Free Remote Code Execution Vulnerability

ZDI-24-699

ZDI-CAN-23351

Autodesk

CVE-2024-23144

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-698

ZDI-CAN-23350

Autodesk

CVE-2024-23143

Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-697

ZDI-CAN-23349

Autodesk

CVE-2024-23143

Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-696

ZDI-CAN-23348

Autodesk

CVE-2024-23143

Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-695

ZDI-CAN-23347

Autodesk

CVE-2024-23122

Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-694

ZDI-CAN-23346

Autodesk

CVE-2024-23130

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-693

ZDI-CAN-23342

Autodesk

CVE-2024-23142

Autodesk AutoCAD CATPART File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-692

ZDI-CAN-23341

Autodesk

CVE-2024-23144

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-691

ZDI-CAN-23339

Autodesk

CVE-2024-23129

Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-690

ZDI-CAN-23338

Autodesk

CVE-2024-23146

Autodesk AutoCAD X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-689

ZDI-CAN-23337

Autodesk

CVE-2024-23130

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-688

ZDI-CAN-23336

Autodesk

CVE-2024-23130

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-687

ZDI-CAN-23334

Autodesk

CVE-2024-23127

Autodesk AutoCAD MODEL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-686

ZDI-CAN-23333

Autodesk

CVE-2024-23130

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-685

ZDI-CAN-23332

Autodesk

CVE-2024-23157

Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-684

ZDI-CAN-23331

Autodesk

CVE-2024-23128

Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-683

ZDI-CAN-22302

Autodesk

CVE-2024-37003

Autodesk AutoCAD DWG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-682

ZDI-CAN-22958

Siemens

CVE-2024-35303

Siemens Tecnomatix Plant Simulation MODEL File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-681

ZDI-CAN-22747

Fuji Electric

CVE-2024-37029

Fuji Electric Tellus Lite V-Simulator 6 V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-680

ZDI-CAN-22813

Fuji Electric

CVE-2024-37029

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-679

ZDI-CAN-22875

Fuji Electric

CVE-2024-37029

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-678

ZDI-CAN-22746

Fuji Electric

CVE-2024-37022

Fuji Electric Tellus Lite V-Simulator 6 X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-677

ZDI-CAN-23991

Dropbox

CVE-2024-5924

(0Day) Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability

ZDI-24-676

ZDI-CAN-23174

Deep Sea Electronics

CVE-2024-5952

(0Day) Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-Service Vulnerability

ZDI-24-675

ZDI-CAN-23173

Deep Sea Electronics

CVE-2024-5951

(0Day) Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability

ZDI-24-674

ZDI-CAN-23172

Deep Sea Electronics

CVE-2024-5950

(0Day) Deep Sea Electronics DSE855 Multipart Value Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-673

ZDI-CAN-23171

Deep Sea Electronics

CVE-2024-5949

(0Day) Deep Sea Electronics DSE855 Multipart Boundary Infinite Loop Denial-of-Service Vulnerability

ZDI-24-672

ZDI-CAN-23170

Deep Sea Electronics

CVE-2024-5948

(0Day) Deep Sea Electronics DSE855 Multipart Boundary Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-671

ZDI-CAN-22679

Deep Sea Electronics

CVE-2024-5947

(0Day) Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability

ZDI-24-670

ZDI-CAN-20768

Famatech

CVE-2024-30376

(0Day) Famatech Advanced IP Scanner Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZDI-24-669

ZDI-CAN-23973

IrfanView

CVE-2024-5876

IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-668

ZDI-CAN-23972

IrfanView

CVE-2024-5875

IrfanView SHP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-667

ZDI-CAN-23969

IrfanView

CVE-2024-5874

IrfanView PNT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-666

ZDI-CAN-23974

IrfanView

CVE-2024-5877

IrfanView PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-665

ZDI-CAN-23848

Mozilla

CVE-2024-29944

(Pwn2Own) Mozilla Firefox Exposed Dangerous Function Sandbox Escape Vulnerability

ZDI-24-664

ZDI-CAN-23794

Mozilla

CVE-2024-29943

(Pwn2Own) Mozilla Firefox SpiderMonkey JIT Compiler Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-663

ZDI-CAN-23014

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-662

ZDI-CAN-23016

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-661

ZDI-CAN-23017

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-660

ZDI-CAN-23031

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-659

ZDI-CAN-23032

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-658

ZDI-CAN-23034

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-657

ZDI-CAN-23045

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-656

ZDI-CAN-23046

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-655

ZDI-CAN-23047

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft CMT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-654

ZDI-CAN-23048

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft ALM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-653

ZDI-CAN-23068

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft TBK File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-652

ZDI-CAN-23079

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-651

ZDI-CAN-23085

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-650

ZDI-CAN-23080

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-649

ZDI-CAN-23081

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-648

ZDI-CAN-23142

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-647

ZDI-CAN-23143

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-646

ZDI-CAN-23165

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-645

ZDI-CAN-23166

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-644

ZDI-CAN-23167

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-643

ZDI-CAN-23175

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-642

ZDI-CAN-23168

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-641

ZDI-CAN-23176

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-640

ZDI-CAN-23177

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-639

ZDI-CAN-23169

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-638

ZDI-CAN-23178

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-637

ZDI-CAN-23179

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-636

ZDI-CAN-23134

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-635

ZDI-CAN-23135

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-634

ZDI-CAN-23136

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-633

ZDI-CAN-23087

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-632

ZDI-CAN-23084

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-631

ZDI-CAN-23083

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-630

ZDI-CAN-23082

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-629

ZDI-CAN-23137

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-628

ZDI-CAN-23138

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-627

ZDI-CAN-23139

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-626

ZDI-CAN-23140

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-625

ZDI-CAN-23141

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-624

ZDI-CAN-23144

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-623

ZDI-CAN-23132

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-622

ZDI-CAN-23133

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-621

ZDI-CAN-23088

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-620

ZDI-CAN-23086

Delta Electronics

CVE-2024-4192

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-619

ZDI-CAN-24167

Logsign

CVE-2024-5719

Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability

ZDI-24-618

ZDI-CAN-24166

Logsign

CVE-2024-5718

Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability

ZDI-24-617

ZDI-CAN-24165

Logsign

CVE-2024-5717

Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability

ZDI-24-616

ZDI-CAN-24164

Logsign

CVE-2024-5716

Logsign Unified SecOps Platform Authentication Bypass Vulnerability

ZDI-24-615

ZDI-CAN-24169

Logsign

CVE-2024-5721

Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability

ZDI-24-614

ZDI-CAN-24170

Logsign

CVE-2024-5722

Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability

ZDI-24-613

ZDI-CAN-24168

Logsign

CVE-2024-5720

Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability

ZDI-24-612

ZDI-CAN-23163

Luxion

 

(0Day) Luxion KeyShot Viewer JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-611

ZDI-CAN-23124

Luxion

 

Luxion KeyShot Viewer X_T File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-610

ZDI-CAN-17863

Advantech

CVE-2023-52335

Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability

ZDI-24-609

ZDI-CAN-23461

Microsoft

CVE-2024-30082

Microsoft Windows Menu DC Pen Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-608

ZDI-CAN-23462

Microsoft

CVE-2024-30082

Microsoft Windows Menu DC Brush Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-607

ZDI-CAN-23789

Microsoft

CVE-2024-30089

(Pwn2Own) Microsoft Windows mskssrv Driver Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-606

ZDI-CAN-23449

Microsoft

CVE-2024-30088

(Pwn2Own) Microsoft Windows NtQueryInformationToken Race Condition Local Privilege Escalation Vulnerability

ZDI-24-605

ZDI-CAN-23774

Microsoft

CVE-2024-30087

(Pwn2Own) Microsoft Windows win32kfull Improper Input Validation Local Privilege Escalation Vulnerability

ZDI-24-604

ZDI-CAN-23788

Microsoft

CVE-2024-35250

(Pwn2Own) Microsoft Windows UnserializePropertySet Privilege Context Switching Error Local Privilege Escalation Vulnerability

ZDI-24-603

ZDI-CAN-23773

Microsoft

CVE-2024-30084

(Pwn2Own) Microsoft Windows UnserializePropertySet Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

ZDI-24-602

ZDI-CAN-23791

Microsoft

CVE-2024-30086

(Pwn2Own) Microsoft Windows DirectComposition Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-601

ZDI-CAN-23845

Microsoft

CVE-2024-30085

(Pwn2Own) Microsoft Windows cldflt Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-24-600

ZDI-CAN-21034

Schneider Electric

Schneider Electric APC Easy UPS Online startRun Exposed Dangerous Method Remote Code Execution Vulnerability

ZDI-24-599

ZDI-CAN-24054

Adobe

CVE-2024-34115

Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-598

ZDI-CAN-16220

Microsoft

 

(0Day) Microsoft Windows Incorrect Permission Assignment Information Disclosure Vulnerability

ZDI-24-597

ZDI-CAN-22683

Centreon

CVE-2024-5725

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability

ZDI-24-596

ZDI-CAN-23561

Centreon

CVE-2024-32501

Centreon updateServiceHost_MC SQL Injection Remote Code Execution Vulnerability

ZDI-24-595

ZDI-CAN-23294

Centreon

CVE-2024-5723

Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability

ZDI-24-594

ZDI-CAN-22974

Siemens

CVE-2024-32639

Siemens Tecnomatix Plant Simulation MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-593

ZDI-CAN-18568

Linux

CVE-2023-31436

Linux Kernel Net Scheduler Out-Of-Bounds Access Local Privilege Escalation Vulnerability

ZDI-24-592

ZDI-CAN-18745

Linux

CVE-2023-39189

Linux Kernel nftables Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-591

ZDI-CAN-18387

Linux

CVE-2023-42755

Linux Kernel RSVP Filter Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-590

ZDI-CAN-21824

Linux

CVE-2023-4458

Linux Kernel ksmbd smb2_open Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-589

ZDI-CAN-21588

Linux

CVE-2023-39180

Linux Kernel ksmbd Read Request Memory Leak Denial-of-Service Vulnerability

ZDI-24-588

ZDI-CAN-21587

Linux

CVE-2023-39179

Linux Kernel ksmbd Read Request Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-587

ZDI-CAN-21598

Linux

 

Linux Kernel ksmbd SetInfo Request Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-586

ZDI-CAN-21589

Linux

CVE-2023-39176

Linux Kernel ksmbd Transform Header Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-585

ZDI-CAN-22715

Trend Micro

CVE-2024-36473

Trend Micro VPN Proxy One Pro Link Following Denial-of-Service Vulnerability

ZDI-24-584

ZDI-CAN-19843

NETGEAR

CVE-2023-51635

(Pwn2Own) NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-583

ZDI-CAN-19589

NETGEAR

CVE-2023-51634

(Pwn2Own) NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability

ZDI-24-582

ZDI-CAN-19094

SEW-EURODRIVE

CVE-2024-1167

SEW-EURODRIVE MOVITOOLS MotionStudio XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-581

ZDI-CAN-22281

Microsoft

 

Microsoft Azure SQL Managed Instance Documentation SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

ZDI-24-580

ZDI-CAN-22149

Microsoft

 

Microsoft Artifact Registry Container Images Empty Password Authentication Bypass Vulnerability

ZDI-24-579

ZDI-CAN-22309

Apple

CVE-2024-27836

Apple macOS PPM Image Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-578

ZDI-CAN-22897

Apple

CVE-2024-23286

Apple macOS CoreGraphics Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-577

ZDI-CAN-21599

Trend Micro

CVE-2024-37289

Trend Micro Apex One Improper Access Control Local Privilege Escalation Vulnerability

ZDI-24-576

ZDI-CAN-22269

Trend Micro

CVE-2024-32849

Trend Micro Maximum Security coreServiceShell Link Following Local Privilege Escalation Vulnerability

ZDI-24-575

ZDI-CAN-21461

Trend Micro

CVE-2024-36358

Trend Micro Deep Security Link Following Local Privilege Escalation Vulnerability

ZDI-24-574

ZDI-CAN-21495

Trend Micro

CVE-2024-36359

Trend Micro InterScan Web Security Virtual Appliance Cross-Site Scripting Privilege Escalation Vulnerability

ZDI-24-573

ZDI-CAN-22032

Trend Micro

CVE-2024-36307

Trend Micro Apex One Security Agent Link Following Information Disclosure Vulnerability

ZDI-24-572

ZDI-CAN-22693

Trend Micro

CVE-2024-36305

Trend Micro Apex One Security Agent Link Following Local Privilege Escalation Vulnerability

ZDI-24-571

ZDI-CAN-22667

Trend Micro

CVE-2024-36304

Trend Micro Apex One Security Agent Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

ZDI-24-570

ZDI-CAN-22481

Trend Micro

CVE-2024-36303

Trend Micro Apex One Origin Validation Error Local Privilege Escalation Vulnerability

ZDI-24-569

ZDI-CAN-22039

Trend Micro

CVE-2024-36302

Trend Micro Apex One Origin Validation Error Local Privilege Escalation Vulnerability

ZDI-24-568

ZDI-CAN-22038

Trend Micro

CVE-2024-36306

Trend Micro Apex One Damage Cleanup Engine Link Following Denial-of-Service Vulnerability

ZDI-24-567

ZDI-CAN-22873

GStreamer

CVE-2024-0444

GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-566

ZDI-CAN-22449

Luxion

CVE-2024-30374

Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-565

ZDI-CAN-22515

Luxion

CVE-2024-30375

Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-564

ZDI-CAN-22748

Fuji Electric

CVE-2024-5597

Fuji Electric Monitouch V-SFT V9 File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-563

ZDI-CAN-22724

NETGEAR

CVE-2024-5505

NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability

ZDI-24-562

ZDI-CAN-22557

Canon

CVE-2023-6234

Canon imageCLASS MF753Cdw setResource Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-561

ZDI-CAN-23879

Progress Software

CVE-2024-4358

Progress Software Telerik Reporting Register Authentication Bypass Vulnerability

ZDI-24-560

ZDI-CAN-22550

Lexmark

CVE-2023-50738

Lexmark CX331adwe Firmware Downgrade Remote Code Execution Vulnerability

ZDI-24-559

ZDI-CAN-22312

G DATA

CVE-2024-1867

G DATA Total Security Link Following Local Privilege Escalation Vulnerability

ZDI-24-558

ZDI-CAN-22313

G DATA

CVE-2024-1868

G DATA Total Security Link Following Local Privilege Escalation Vulnerability

ZDI-24-557

ZDI-CAN-22092

Kofax

CVE-2024-30373

Kofax Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-556

ZDI-CAN-22044

Kofax

CVE-2024-5513

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-555

ZDI-CAN-22021

Kofax

CVE-2024-5512

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-554

ZDI-CAN-22020

Kofax

CVE-2024-5511

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-553

ZDI-CAN-22019

Kofax

CVE-2024-5510

Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-552

ZDI-CAN-22933

Kofax

CVE-2024-5307

Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-551

ZDI-CAN-22930

Kofax

CVE-2024-5306

Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-550

ZDI-CAN-22921

Kofax

CVE-2024-5305

Kofax Power PDF PDF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-549

ZDI-CAN-22920

Kofax

CVE-2024-5304

Kofax Power PDF TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-548

ZDI-CAN-22919

Kofax

CVE-2024-5303

Kofax Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-547

ZDI-CAN-22918

Kofax

CVE-2024-5302

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-546

ZDI-CAN-22917

Kofax

CVE-2024-5301

Kofax Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-545

ZDI-CAN-22459

Sonos

CVE-2024-5269

(Pwn2Own) Sonos Era 100 SMB2 Message Handling Use-After-Free Remote Code Execution Vulnerability

ZDI-24-544

ZDI-CAN-22428

Sonos

CVE-2024-5268

(Pwn2Own) Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-543

ZDI-CAN-22384

Sonos

CVE-2024-5267

(Pwn2Own) Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-542

ZDI-CAN-22336

Sonos

CVE-2024-5256

(Pwn2Own) Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability

ZDI-24-541

ZDI-CAN-22266

Luxion

CVE-2024-5507

Luxion KeyShot Viewer KSP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-540

ZDI-CAN-22738

Luxion

CVE-2024-5509

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-539

ZDI-CAN-22267

Luxion

CVE-2024-5508

Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-538

ZDI-CAN-22514

Luxion

CVE-2024-5506

Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-537

ZDI-CAN-21419

Fuji Electric

CVE-2024-34579

Fuji Electric Alpha5 C5V File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-536

ZDI-CAN-21423

Fuji Electric

CVE-2024-34579

Fuji Electric Alpha5 C5V File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-535

ZDI-CAN-22908

Fuji Electric

CVE-2024-34171

Fuji Electric Monitouch V-SFT V9C File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-534

ZDI-CAN-22896

Fuji Electric

CVE-2024-34171

Fuji Electric Monitouch V-SFT V9C File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-533

ZDI-CAN-22874

Fuji Electric

CVE-2024-34171

Fuji Electric Monitouch V-SFT V9C File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-532

ZDI-CAN-22815

Fuji Electric

CVE-2024-34171

Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-531

ZDI-CAN-22814

Fuji Electric

CVE-2024-5271

Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-530

ZDI-CAN-22749

Fuji Electric

CVE-2024-34171

Fuji Electric Monitouch V-SFT V9C File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-529

ZDI-CAN-23782

VMware

CVE-2024-22269

(Pwn2Own) VMware Workstation UrbBuf_getDataBuf Uninitialized Variable Information Disclosure Vulnerability

ZDI-24-528

ZDI-CAN-23783

VMware

CVE-2024-22270

(Pwn2Own) VMware Workstation hgfsVMCI_fileread Use of Uninitialized Variable Information Disclosure Vulnerability

ZDI-24-527

ZDI-CAN-23847

VMware

CVE-2024-22267

(Pwn2Own) VMWare Workstation VBluetoothHCI_PacketOut Use-After-Free Privilege Escalation Vulnerability

ZDI-24-526

ZDI-CAN-23844

VMware

CVE-2024-22267

(Pwn2Own) VMware Workstation VBluetoothHCI_PacketOut Use-After-Free Privilege Escalation Vulnerability

ZDI-24-525

ZDI-CAN-22754

A10

CVE-2024-30369

A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI-24-524

ZDI-CAN-22517

A10

CVE-2024-30368

A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability

ZDI-24-523

ZDI-CAN-20923

Phoenix Contact

CVE-2024-28137

Phoenix Contact CHARX SEC-3100 Link Following Local Privilege Escalation Vulnerability

ZDI-24-522

ZDI-CAN-23330

Phoenix Contact

CVE-2024-28135

(Pwn2Own) Phoenix Contact CHARX SEC-3100 Filename Command Injection Remote Code Execution Vulnerability

ZDI-24-521

ZDI-CAN-23391

Phoenix Contact

CVE-2024-28136

(Pwn2Own) Phoenix Contact CHARX SEC-3100 OCPP charx_pack_logs Command Injection Remote Code Execution Vulnerability

ZDI-24-520

ZDI-CAN-23418

Phoenix Contact

CVE-2024-28134

(Pwn2Own) Phoenix Contact CHARX SEC-3100 Missing Encryption Authentication Bypass Vulnerability

ZDI-24-519

ZDI-CAN-23419

Phoenix Contact

CVE-2024-28133

(Pwn2Own) Phoenix Contact CHARX SEC-3100 Untrusted Search Path Local Privilege Escalation Vulnerability

ZDI-24-518

ZDI-CAN-23880

Progress Software

CVE-2024-4357

Progress Software Telerik Reporting ValidateMetadaUri XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-517

ZDI-CAN-23353

Progress Software

CVE-2024-4561

Progress Software WhatsUp Gold FaviconController Server-Side Request Forgery Information Disclosure Vulnerability

ZDI-24-516

ZDI-CAN-23447

Progress Software

CVE-2024-4562

Progress Software WhatsUp Gold HttpContentActiveController Server-Side Request Forgery Information Disclosure Vulnerability

ZDI-24-515

ZDI-CAN-22951

NETGEAR

CVE-2024-5247

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-514

ZDI-CAN-23549

Ivanti

CVE-2024-29846

Ivanti Endpoint Manager GetVulnerabilitiesDataTable SQL Injection Remote Code Execution Vulnerability

ZDI-24-513

ZDI-CAN-23538

Ivanti

CVE-2024-29830

Ivanti Endpoint Manager GetLogFileRulesNameUniqueSQL SQL Injection Remote Code Execution Vulnerability

ZDI-24-512

ZDI-CAN-23537

Ivanti

CVE-2024-29829

Ivanti Endpoint Manager GetLogFileRulesSQL SQL Injection Remote Code Execution Vulnerability

ZDI-24-511

ZDI-CAN-23536

Ivanti

CVE-2024-29828

Ivanti Endpoint Manager GetRulesetsSQL SQL Injection Remote Code Execution Vulnerability

ZDI-24-510

ZDI-CAN-23517

Ivanti

CVE-2024-29827

Ivanti Endpoint Manager GetDBPatchProducts SQL Injection Remote Code Execution Vulnerability

ZDI-24-509

ZDI-CAN-23516

Ivanti

CVE-2024-29826

Ivanti Endpoint Manager GetDBPatches SQL Injection Remote Code Execution Vulnerability

ZDI-24-508

ZDI-CAN-23484

Ivanti

CVE-2024-29825

Ivanti Endpoint Manager RecordBrokenApp SQL Injection Remote Code Execution Vulnerability

ZDI-24-507

ZDI-CAN-23482

Ivanti

CVE-2024-29824

Ivanti Endpoint Manager RecordGoodApp SQL Injection Remote Code Execution Vulnerability

ZDI-24-506

ZDI-CAN-23518

Ivanti

CVE-2024-29823

Ivanti Endpoint Manager GetDBVulnerabilities SQL Injection Remote Code Execution Vulnerability

ZDI-24-505

ZDI-CAN-23483

Ivanti

CVE-2024-29822

Ivanti Endpoint Manager RecordGoodApp SQL Injection Remote Code Execution Vulnerability

ZDI-24-504

ZDI-CAN-23525

Ivanti

CVE-2024-29848

Ivanti Avalanche FileStoreConfig Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-503

ZDI-CAN-22439

TP-Link

CVE-2024-5244

(Pwn2Own) TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability

ZDI-24-502

ZDI-CAN-22523

TP-Link

CVE-2024-5243

(Pwn2Own) TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-501

ZDI-CAN-22522

TP-Link

CVE-2024-5242

(Pwn2Own) TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-500

ZDI-CAN-22383

TP-Link

CVE-2024-5228

(Pwn2Own) TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-499

ZDI-CAN-22446

TP-Link

CVE-2024-5227

(Pwn2Own) TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability

ZDI-24-498

ZDI-CAN-22923

NETGEAR

CVE-2024-5247

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-497

ZDI-CAN-22868

NETGEAR

CVE-2024-5246

NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability

ZDI-24-496

ZDI-CAN-22755

NETGEAR

CVE-2024-5245

NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability

ZDI-24-495

ZDI-CAN-23790

Microsoft

CVE-2024-30037

(Pwn2Own) Microsoft Windows CLFS Integer Underflow Local Privilege Escalation Vulnerability

ZDI-24-494

ZDI-CAN-23490

VMware

CVE-2024-22268

VMware Workstation SVGA Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-493

ZDI-CAN-22887

Adobe

CVE-2024-30279

Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-492

ZDI-CAN-22867

Adobe

CVE-2024-30280

Adobe Acrobat Pro DC AcroForm Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-491

ZDI-CAN-23035

WithSecure

CVE-2024-4454

WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability

ZDI-24-490

ZDI-CAN-22364

LAquis

CVE-2024-5040

LAquis SCADA LGX Report Processing AddComboFile Path Traversal Remote Code Execution Vulnerability

ZDI-24-489

ZDI-CAN-22465

LAquis

CVE-2024-5040

LAquis SCADA LGX Report File Open Path Traversal Remote Code Execution Vulnerability

ZDI-24-488

ZDI-CAN-22358

LAquis

CVE-2024-5040

LAquis SCADA LGX Report TextFile Open Path Traversal Remote Code Execution Vulnerability

ZDI-24-487

ZDI-CAN-22468

LAquis

CVE-2024-5040

LAquis SCADA LGX Report STRING READFROMFILE Path Traversal Information Disclosure Vulnerability

ZDI-24-486

ZDI-CAN-22467

LAquis

CVE-2024-5040

LAquis SCADA LGX Report STRING WRITETOFILE Path Traversal Remote Code Execution Vulnerability

ZDI-24-485

ZDI-CAN-22469

LAquis

CVE-2024-5040

LAquis SCADA LGX Report TextFile OpenWithoutMemory Path Traversal Remote Code Execution Vulnerability

ZDI-24-484

ZDI-CAN-22470

LAquis

CVE-2024-5040

LAquis SCADA LGX Report Table Save Path Traversal Remote Code Execution Vulnerability

ZDI-24-483

ZDI-CAN-23327

Adobe

CVE-2024-30310

Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-482

ZDI-CAN-23474

Adobe

CVE-2024-34094

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-481

ZDI-CAN-23475

Adobe

CVE-2024-34095

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-480

ZDI-CAN-23472

Adobe

CVE-2024-34096

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-479

ZDI-CAN-23466

Adobe

CVE-2024-30284

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-478

ZDI-CAN-23473

Adobe

CVE-2024-34097

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-477

ZDI-CAN-23614

Adobe

CVE-2024-34101

Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-476

ZDI-CAN-22407

QNAP

CVE-2023-51365

(Pwn2Own) QNAP TS-464 HLS_tmp Directory Traversal Arbitrary File Creation Vulnerability

ZDI-24-475

ZDI-CAN-22410

QNAP

CVE-2023-51364

(Pwn2Own) QNAP TS-464 File Upload Directory Traversal Arbitrary File Creation Vulnerability

ZDI-24-474

ZDI-CAN-22495

QNAP

CVE-2024-32766

(Pwn2Own) QNAP TS-464 Exposed Dangerous Method Privilege Escalation Vulnerability

ZDI-24-473

ZDI-CAN-22378

QNAP

CVE-2024-27124

(Pwn2Own) QNAP TS-464 Authentication Service Improper Certificate Validation Vulnerability

ZDI-24-472

ZDI-CAN-22457

QNAP

CVE-2024-32764

(Pwn2Own) QNAP TS-464 Netmgr Endpoint CRLF Injection Arbitrary Configuration Update Vulnerability

ZDI-24-471

ZDI-CAN-22494

QNAP

CVE-2024-21901

(Pwn2Own) QNAP TS-464 authLogin SQL Injection Remote Code Execution Vulnerability

ZDI-24-470

ZDI-CAN-22493

QNAP

CVE-2024-21899

(Pwn2Own) QNAP TS-464 QR Code Device CRLF Injection Arbitrary Configuration Change Vulnerability

ZDI-24-469

ZDI-CAN-21600

Avira

CVE-2023-51636

Avira Prime Link Following Local Privilege Escalation Vulnerability

ZDI-24-468

ZDI-CAN-21579

Sante

CVE-2023-51637

Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability

ZDI-24-467

ZDI-CAN-23896

GStreamer

CVE-2024-4453

GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-24-466

ZDI-CAN-21578

Siemens

CVE-2024-32066

Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-465

ZDI-CAN-21564

Siemens

CVE-2024-32059

Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-464

ZDI-CAN-21566

Siemens

CVE-2024-32061

Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-463

ZDI-CAN-21568

Siemens

CVE-2024-32062

Siemens Simcenter Femap IGS File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-462

ZDI-CAN-21573

Siemens

CVE-2024-32063

Siemens Simcenter Femap IGS File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-461

ZDI-CAN-21575

Siemens

CVE-2024-32064

Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-460

ZDI-CAN-21577

Siemens

CVE-2024-32065

Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-459

ZDI-CAN-21565

Siemens

CVE-2024-32060

Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-458

ZDI-CAN-21562

Siemens

CVE-2024-32057

Siemens Simcenter Femap IGS File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-457

ZDI-CAN-21563

Siemens

CVE-2024-32058

Siemens Simcenter Femap IGS File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-456

ZDI-CAN-21906

NI

CVE-2024-4044

NI FlexLogger FLXPROJ File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-455

ZDI-CAN-23500

SolarWinds

CVE-2024-28075

SolarWinds Access Rights Manager JsonSerializationBinder Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-454

ZDI-CAN-23059

SolarWinds

CVE-2024-23473

SolarWinds Access Rights Manager Hard-Coded Credentials Authentication Bypass Vulnerability

ZDI-24-453

ZDI-CAN-23586

Microsoft

CVE-2024-30043

Microsoft SharePoint BaseXmlDataSource XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-452

ZDI-CAN-22417

Microsoft

CVE-2024-30034

Microsoft Windows cldflt Type Confusion Information Disclosure Vulnerability

ZDI-24-451

ZDI-CAN-22907

Microsoft

CVE-2024-30033

Microsoft Windows Search Service Link Following Local Privilege Escalation Vulnerability

ZDI-24-450

ZDI-CAN-21828

D-Link

CVE-2024-5299

(0Day) D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability

ZDI-24-449

ZDI-CAN-21842

D-Link

CVE-2024-5298

(0Day) D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability

ZDI-24-448

ZDI-CAN-21821

D-Link

CVE-2024-5297

(0Day) D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability

ZDI-24-447

ZDI-CAN-21991

D-Link

CVE-2024-5296

(0Day) D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

ZDI-24-446

ZDI-CAN-21294

D-Link

CVE-2024-5295

(0Day) D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability

ZDI-24-445

ZDI-CAN-21668

D-Link

CVE-2024-5294

(0Day) D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability

ZDI-24-444

ZDI-CAN-21853

D-Link

CVE-2024-5293

(0Day) D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-443

ZDI-CAN-21426

D-Link

CVE-2024-5292

(0Day) D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZDI-24-442

ZDI-CAN-21235

D-Link

CVE-2024-5291

(0Day) D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability

ZDI-24-441

ZDI-CAN-21884

Delta Electronics

CVE-2024-1595

Delta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path Remote Code Execution Vulnerability

ZDI-24-440

ZDI-CAN-22502

Delta Electronics

CVE-2023-46604

Delta Electronics InfraSuite Device Master ActiveMQ Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-439

ZDI-CAN-20464

Microsoft

CVE-2023-24948

Microsoft Windows Bluetooth AVDTP Protocol Integer Underflow Remote Code Execution Vulnerability

ZDI-24-438

ZDI-CAN-22618

Dassault Systèmes

CVE-2024-3298

Dassault Systèmes eDrawings Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-437

ZDI-CAN-22619

Dassault Systèmes

CVE-2024-3298

Dassault Systèmes eDrawings Viewer DXF File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-436

ZDI-CAN-22620

Dassault Systèmes

CVE-2024-3298

Dassault Systèmes eDrawings Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-435

ZDI-CAN-22624

Dassault Systèmes

CVE-2024-3298

Dassault Systèmes eDrawings Viewer DXF File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-434

ZDI-CAN-22625

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer SAT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-433

ZDI-CAN-22621

Dassault Systèmes

CVE-2024-3298

Dassault Systèmes eDrawings Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-432

ZDI-CAN-22616

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer JT File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-431

ZDI-CAN-22623

Dassault Systèmes

CVE-2024-3298

Dassault Systèmes eDrawings Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-430

ZDI-CAN-22617

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer JT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-429

ZDI-CAN-22622

Dassault Systèmes

CVE-2024-3298

Dassault Systèmes eDrawings Viewer DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-428

ZDI-CAN-22615

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer JT File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-427

ZDI-CAN-23106

Adobe

CVE-2024-30306

Adobe Acrobat Reader DC AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-426

ZDI-CAN-23077

Adobe

CVE-2024-30302

Adobe Acrobat Reader DC AcroForm Use-After-Free Information Disclosure Vulnerability

ZDI-24-425

ZDI-CAN-23044

Adobe

CVE-2024-30303

Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-424

ZDI-CAN-23043

Adobe

CVE-2024-30305

Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-423

ZDI-CAN-23042

Adobe

CVE-2024-30301

Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-422

ZDI-CAN-23040

Adobe

CVE-2024-30304

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-421

ZDI-CAN-23521

SonicWALL

CVE-2024-29011

SonicWALL GMS Virtual Appliance ECMClientAuthenticator Hard-Coded Credential Authentication Bypass Vulnerability

ZDI-24-420

ZDI-CAN-22675

SonicWALL

CVE-2024-29010

SonicWALL GMS Virtual Appliance ECMPolicy XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-419

ZDI-CAN-22332

Xiaomi

CVE-2024-4406

(Pwn2Own) Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

ZDI-24-418

ZDI-CAN-22379

Xiaomi

CVE-2024-4405

(Pwn2Own) Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability

ZDI-24-417

ZDI-CAN-22559

Xiaomi

CVE-2023-26322

Xiaomi Pro 13 isUrlMatchLevel Permissive List of Allowed Inputs Remote Code Execution Vulnerability

ZDI-24-416

ZDI-CAN-20731

Centreon

CVE-2023-51633

Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability

ZDI-24-415

ZDI-CAN-23775

Oracle

CVE-2024-21113

(Pwn2Own) Oracle VirtualBox E1000 Uninitialized Memory Information Disclosure Vulnerability

ZDI-24-414

ZDI-CAN-23787

Oracle

CVE-2024-21112

(Pwn2Own) Oracle VirtualBox AHCI Controller Uninitialized Memory Information Disclosure Vulnerability

ZDI-24-413

ZDI-CAN-23796

Oracle

CVE-2024-21115

(Pwn2Own) Oracle VirtualBox DevVGA Out-Of-Bounds Write Local Privilege Escalation Vulnerability

ZDI-24-412

ZDI-CAN-23797

Oracle

CVE-2024-21114

(Pwn2Own) Oracle VirtualBox VirtIOCore Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-24-411

ZDI-CAN-23798

Oracle

CVE-2024-21121

(Pwn2Own) Oracle VirtualBox BusLogic Uninitialized Memory Information Disclosure Vulnerability

ZDI-24-410

ZDI-CAN-23403

Oracle

CVE-2024-21116

Oracle VirtualBox vboxdrv Improper Privilege Management Local Privilege Escalation Vulnerability

ZDI-24-409

ZDI-CAN-23388

Oracle

CVE-2024-21110

Oracle VirtualBox Guest Additions Improper Access Control Local Privilege Escalation Vulnerability

ZDI-24-408

ZDI-CAN-23076

Oracle

CVE-2024-21109

Oracle VirtualBox Web Service Exposure of Resource to Wrong Sphere Information Disclosure Vulnerability

ZDI-24-407

ZDI-CAN-22880

X.Org

CVE-2024-31083

X.Org Server ProcRenderAddGlyphs Use-After-Free Local Privilege Escalation Vulnerability

ZDI-24-406

ZDI-CAN-22173

Adobe

CVE-2023-48633

Adobe After Effects AEP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-405

ZDI-CAN-22549

Lexmark

CVE-2023-50739

Lexmark CX331adwe IPP Server Authorization HTTP Header Heap-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-404

ZDI-CAN-22327

Apple

CVE-2024-23264

Apple macOS Metal Framework PVR File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-403

ZDI-CAN-23903

Progress Software

CVE-2024-1800

Progress Software Telerik Report Server ObjectReader Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-402

ZDI-CAN-23902

Progress Software

CVE-2024-1856

Progress Software Telerik Reporting ObjectReader Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-401

ZDI-CAN-23001

Progress Software

CVE-2024-1801

Progress Software Telerik Reporting ObjectReader Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-400

ZDI-CAN-23558

Microsoft

 

Microsoft uAMQP for Python azure-iot-sdks-ci Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-399

ZDI-CAN-22547

Microsoft

CVE-2024-29991

Microsoft Windows MHT File Mark-Of-The-Web Bypass Remote Code Execution Vulnerability

ZDI-24-398

ZDI-CAN-22560

Wazuh

CVE-2023-50260

Wazuh Active Response Module Improper Input Validation Remote Code Execution Vulnerability

ZDI-24-397

ZDI-CAN-22475

Wazuh

CVE-2024-32038

Wazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-396

ZDI-CAN-23024

Microsoft

 

Microsoft Azure ODSP nikisos Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-395

ZDI-CAN-22810

Ivanti

CVE-2024-27984

Ivanti Avalanche WLInfoRailService DELKEY Directory Traversal Arbitrary File Deletion Vulnerability

ZDI-24-394

ZDI-CAN-22990

Ivanti

CVE-2024-27978

Ivanti Avalanche WLAvalancheService Null Pointer Dereference Denial-of-Service Vulnerability

ZDI-24-393

ZDI-CAN-22989

Ivanti

CVE-2024-27977

Ivanti Avalanche WLAvalancheService Directory Traversal Arbitrary File Deletion Vulnerability

ZDI-24-392

ZDI-CAN-22988

Ivanti

CVE-2024-27976

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

ZDI-24-391

ZDI-CAN-22987

Ivanti

CVE-2024-27975

Ivanti Avalanche WLAvalancheService Use-After-Free Remote Code Execution Vulnerability

ZDI-24-390

ZDI-CAN-22986

Ivanti

CVE-2024-25000

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

ZDI-24-389

ZDI-CAN-22985

Ivanti

CVE-2024-24999

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

ZDI-24-388

ZDI-CAN-22984

Ivanti

CVE-2024-24998

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

ZDI-24-387

ZDI-CAN-22950

Ivanti

CVE-2024-24997

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

ZDI-24-386

ZDI-CAN-22940

Ivanti

CVE-2024-24996

Ivanti Avalanche WLInfoRailService Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-385

ZDI-CAN-22885

Ivanti

CVE-2024-24995

Ivanti Avalanche doInTransaction Time-Of-Check Time-Of-Use Remote Code Execution Vulnerability

ZDI-24-384

ZDI-CAN-22866

Ivanti

CVE-2024-24994

Ivanti Avalanche extractZipEntry Directory Traversal Remote Code Execution Vulnerability

ZDI-24-383

ZDI-CAN-22865

Ivanti

CVE-2024-24993

Ivanti Avalanche InstallPackageThread Time-Of-Check Time-Of-Use Remote Code Execution Vulnerability

ZDI-24-382

ZDI-CAN-22854

Ivanti

CVE-2024-24992

Ivanti Avalanche getAdhocFilePath Directory Traversal Remote Code Execution Vulnerability

ZDI-24-381

ZDI-CAN-22839

Ivanti

CVE-2024-24991

Ivanti Avalanche WLAvalancheService Null Pointer Dereference Denial-of-Service Vulnerability

ZDI-24-380

ZDI-CAN-22836

Ivanti

CVE-2024-23535

Ivanti Avalanche copyFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-379

ZDI-CAN-22835

Ivanti

CVE-2024-23534

Ivanti Avalanche getMasterAdhocCollectionsPath Unrestricted File Upload Remote Code Execution Vulnerability

ZDI-24-378

ZDI-CAN-22827

Ivanti

CVE-2024-23532

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-377

ZDI-CAN-22826

Ivanti

CVE-2024-23533

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-376

ZDI-CAN-22756

Ivanti

CVE-2024-23531

Ivanti Avalanche WLInfoRailService Integer Overflow Information Disclosure Vulnerability

ZDI-24-375

ZDI-CAN-22703

Ivanti

CVE-2024-23530

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-374

ZDI-CAN-22702

Ivanti

CVE-2024-23529

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-373

ZDI-CAN-22701

Ivanti

CVE-2024-23528

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-372

ZDI-CAN-22700

Ivanti

CVE-2024-23527

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-371

ZDI-CAN-22699

Ivanti

CVE-2024-23526

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-370

ZDI-CAN-22682

Ivanti

CVE-2024-22061

Ivanti Avalanche WLInfoRailService Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-369

ZDI-CAN-22648

Google

 

Google cAdvisor REST API Improper Access Control Information Disclosure Vulnerability

ZDI-24-368

ZDI-CAN-22300

GStreamer

CVE-2023-50186

GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-367

ZDI-CAN-23785

Google

CVE-2024-3159

(Pwn2Own) Google Chrome V8 Enum Cache Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-366

ZDI-CAN-23792

Google

CVE-2024-2887

(Pwn2Own) Google Chrome WASM Improper Input Validation Remote Code Execution Vulnerability

ZDI-24-365

ZDI-CAN-23799

Microsoft

CVE-2024-3914

(Pwn2Own) Microsoft Edge DOMArrayBuffer Use-After-Free Remote Code Execution Vulnerability

ZDI-24-364

ZDI-CAN-21954

Arista

CVE-2024-27889

Arista NG Firewall ReportEntry SQL Injection Remote Code Execution Vulnerability

ZDI-24-363

ZDI-CAN-22924

Microsoft

CVE-2024-26158

Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability

ZDI-24-362

ZDI-CAN-23397

Microsoft

CVE-2024-20685

Microsoft Azure Private 5G Core InitialUEMessage Improper Input Validation Denial-of-Service Vulnerability

ZDI-24-361

ZDI-CAN-23943

Microsoft

CVE-2024-29988

Microsoft Windows Internet Shortcut SmartScreen Bypass Vulnerability

ZDI-24-360

ZDI-CAN-23446

JetBrains

CVE-2024-31138

JetBrains TeamCity AgentDistributionSettingsController Cross-Site Scripting Vulnerability

ZDI-24-359

ZDI-CAN-22591

Flexera Software

CVE-2024-2658

Flexera Software FlexNet Publisher Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

ZDI-24-358

ZDI-CAN-21883

GitLab

CVE-2024-2818

GitLab Label Description Uncontrolled Resource Consumption Denial-of-Service Vulnerability

ZDI-24-357

ZDI-CAN-23156

RARLAB

CVE-2024-30370

RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability

ZDI-24-356

ZDI-CAN-22051

Siemens

CVE-2024-27907

Siemens Simcenter Femap MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-355

ZDI-CAN-22164

Wireshark

CVE-2023-6175

Wireshark NetScreen File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-354

ZDI-CAN-21032

Schneider Electric

CVE-2024-2229

Schneider Electric EcoStruxure Power Design - Ecodial BinSerializer Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-353

ZDI-CAN-20492

Softing

CVE-2024-0860

Softing edgeConnector Siemens Cleartext Transmission of Credentials Authentication Bypass Vulnerability

ZDI-24-352

ZDI-CAN-21225

Softing

CVE-2023-38126

Softing edgeConnector Siemens Directory Traversal Remote Code Execution Vulnerability

ZDI-24-351

ZDI-CAN-22695

SolarWinds

CVE-2024-23479

SolarWinds Access Rights Manager OpenFileStreamLocal Directory Traversal Remote Code Execution Vulnerability

ZDI-24-350

ZDI-CAN-22531

SolarWinds

CVE-2023-40057

SolarWinds Access Rights Manager JsonSerializationHelper Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-349

ZDI-CAN-22713

SolarWinds

CVE-2024-23476

SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-348

ZDI-CAN-22739

SolarWinds

CVE-2024-23477

SolarWinds Access Rights Manager openServerFileStream Directory Traversal Remote Code Execution Vulnerability

ZDI-24-347

ZDI-CAN-22416

SolarWinds

CVE-2024-23478

SolarWinds Access Rights Manager JsonSerializationBinder Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-346

ZDI-CAN-23355

Foxit

CVE-2024-30371

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-345

ZDI-CAN-23013

Foxit

CVE-2024-30367

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-344

ZDI-CAN-23002

Foxit

CVE-2024-30366

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-343

ZDI-CAN-22947

Foxit

CVE-2024-30365

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-342

ZDI-CAN-23008

Foxit

CVE-2024-30363

Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-341

ZDI-CAN-23009

Foxit

CVE-2024-30364

Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-340

ZDI-CAN-22797

Foxit

CVE-2024-30360

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-339

ZDI-CAN-22798

Foxit

CVE-2024-30362

Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-338

ZDI-CAN-22877

Foxit

CVE-2024-30361

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-337

ZDI-CAN-22809

Foxit

CVE-2024-30355

Foxit PDF Reader AcroForm Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-336

ZDI-CAN-22811

Foxit

CVE-2024-30356

Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-335

ZDI-CAN-22800

Foxit

CVE-2024-30352

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-334

ZDI-CAN-22807

Foxit

CVE-2024-30353

Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-333

ZDI-CAN-22708

Foxit

CVE-2024-30350

Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-332

ZDI-CAN-22808

Foxit

CVE-2024-30354

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-331

ZDI-CAN-22818

Foxit

CVE-2024-30357

Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability

ZDI-24-330

ZDI-CAN-22821

Foxit

CVE-2024-30358

Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability

ZDI-24-329

ZDI-CAN-22888

Foxit

CVE-2024-30359

Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-328

ZDI-CAN-22799

Foxit

CVE-2024-30351

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-327

ZDI-CAN-22910

Foxit

CVE-2024-30347

Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-326

ZDI-CAN-22911

Foxit

CVE-2024-30348

Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-325

ZDI-CAN-22912

Foxit

CVE-2024-30349

Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-324

ZDI-CAN-22745

Foxit

CVE-2024-30346

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-323

ZDI-CAN-22742

Foxit

CVE-2024-30345

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-322

ZDI-CAN-22720

Foxit

CVE-2024-30342

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-321

ZDI-CAN-22707

Foxit

CVE-2024-30340

Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-320

ZDI-CAN-22733

Foxit

CVE-2024-30344

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-319

ZDI-CAN-22705

Foxit

CVE-2024-30338

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

ZDI-24-318

ZDI-CAN-22704

Foxit

CVE-2024-30337

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-317

ZDI-CAN-22706

Foxit

CVE-2024-30339

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-316

ZDI-CAN-22721

Foxit

CVE-2024-30343

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-24-315

ZDI-CAN-22709

Foxit

CVE-2024-30341

Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-314

ZDI-CAN-22592

Foxit

CVE-2024-30325

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-313

ZDI-CAN-22593

Foxit

CVE-2024-30326

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

ZDI-24-312

ZDI-CAN-22633

Foxit

CVE-2024-30328

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-311

ZDI-CAN-22632

Foxit

CVE-2024-30327

Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability

ZDI-24-310

ZDI-CAN-22634

Foxit

CVE-2024-30329

Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

ZDI-24-309

ZDI-CAN-22636

Foxit

CVE-2024-30330

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-308

ZDI-CAN-22637

Foxit

CVE-2024-30331

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-307

ZDI-CAN-22639

Foxit

CVE-2024-30333

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

ZDI-24-306

ZDI-CAN-22640

Foxit

CVE-2024-30334

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

ZDI-24-305

ZDI-CAN-22638

Foxit

CVE-2024-30332

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

ZDI-24-304

ZDI-CAN-22641

Foxit

CVE-2024-30335

Foxit PDF Reader AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-303

ZDI-CAN-22642

Foxit

CVE-2024-30336

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-302

ZDI-CAN-22576

Foxit

CVE-2024-30324

Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

ZDI-24-301

ZDI-CAN-22501

Foxit

CVE-2024-30323

Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-300

ZDI-CAN-22499

Foxit

CVE-2024-30322

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

ZDI-24-299

ZDI-CAN-21951

Linux

CVE-2023-52628

Linux Kernel nft_exthdr_ipv6_eval Stack-based Buffer Overflow Information Disclosure Vulnerability

ZDI-24-298

ZDI-CAN-21950

Linux

CVE-2023-52628

Linux Kernel nft_exthdr_tcp_eval Stack-based Buffer Overflow Information Disclosure Vulnerability

ZDI-24-297

ZDI-CAN-21961

Linux

CVE-2023-52628

Linux Kernel nft_exthdr_sctp_eval Stack-based Buffer Overflow Information Disclosure Vulnerability

ZDI-24-296

ZDI-CAN-22587

Autodesk

CVE-2024-23138

Autodesk DWG TrueView DWG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-295

ZDI-CAN-21341

Autodesk

CVE-2024-23139

Autodesk FBX Review ABC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-294

ZDI-CAN-23146

Microsoft

CVE-2024-26199

Microsoft Office Performance Monitor Link Following Local Privilege Escalation Vulnerability

ZDI-24-293

ZDI-CAN-22552

Microsoft

CVE-2024-21411

Microsoft Skype Protection Mechanism Failure Remote Code Execution Vulnerability

ZDI-24-292

ZDI-CAN-22671

Adobe

CVE-2024-20745

Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-291

ZDI-CAN-22653

Adobe

CVE-2024-20752

Adobe Bridge PS File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-290

ZDI-CAN-22159

NI

CVE-2024-23609

NI LabVIEW VI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-289

ZDI-CAN-21996

NI

CVE-2024-23612

NI LabVIEW VI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-288

ZDI-CAN-21987

NI

CVE-2024-23611

NI LabVIEW VI File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-287

ZDI-CAN-21985

NI

CVE-2024-23610

NI LabVIEW VI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-286

ZDI-CAN-21984

NI

CVE-2024-23608

NI LabVIEW VI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-285

ZDI-CAN-22141

NI

CVE-2024-23609

NI LabVIEW VI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-284

ZDI-CAN-22674

Adobe

CVE-2024-20765

Adobe Acrobat Reader DC PDF File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-283

ZDI-CAN-22250

Apple

CVE-2024-23257

Apple macOS JP2 Image Parsing Uninitialized Pointer Information Disclosure Vulnerability

ZDI-24-282

ZDI-CAN-22371

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer SAT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-281

ZDI-CAN-22367

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer SAT File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-280

ZDI-CAN-22370

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer SAT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-279

ZDI-CAN-22372

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer SAT File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-278

ZDI-CAN-22490

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-277

ZDI-CAN-22373

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer SAT File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-276

ZDI-CAN-22491

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-275

ZDI-CAN-22489

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-274

ZDI-CAN-22590

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings Viewer STL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-273

ZDI-CAN-22723

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings IPT File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-272

ZDI-CAN-22857

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings SAT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-271

ZDI-CAN-22846

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings SAT File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-270

ZDI-CAN-22847

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings STP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-269

ZDI-CAN-22848

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-268

ZDI-CAN-22849

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings IPT File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-267

ZDI-CAN-22850

Dassault Systèmes

CVE-2024-3299

Dassault Systèmes eDrawings SLDDRW File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-266

ZDI-CAN-22851

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings IPT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-265

ZDI-CAN-22852

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings SAT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-264

ZDI-CAN-22853

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings IPT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-263

ZDI-CAN-22855

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings SAT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-262

ZDI-CAN-22856

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-261

ZDI-CAN-22858

Dassault Systèmes

CVE-2024-3299

Dassault Systèmes eDrawings SLDPRT File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-260

ZDI-CAN-22859

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings IPT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-259

ZDI-CAN-22860

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings IPT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-258

ZDI-CAN-22862

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings CATPART File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-257

ZDI-CAN-22863

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings X_B File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-256

ZDI-CAN-22861

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings CATPART File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-255

ZDI-CAN-22864

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings X_T File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-254

ZDI-CAN-22841

Dassault Systèmes

CVE-2024-3298

Dassault Systèmes eDrawings DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-253

ZDI-CAN-22843

Dassault Systèmes

CVE-2024-3299

Dassault Systèmes eDrawings SLDDRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-252

ZDI-CAN-22844

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-251

ZDI-CAN-22842

Dassault Systèmes

CVE-2024-1847

Dassault Systèmes eDrawings SAT File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-250

ZDI-CAN-22845

Dassault Systèmes

CVE-2024-3298

Dassault Systèmes eDrawings DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-249

ZDI-CAN-21918

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt IGS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-248

ZDI-CAN-21917

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt IGS File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-247

ZDI-CAN-21740

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

ZDI-24-246

ZDI-CAN-21741

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-245

ZDI-CAN-21732

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

ZDI-24-244

ZDI-CAN-21746

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-243

ZDI-CAN-21523

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-242

ZDI-CAN-21729

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-241

ZDI-CAN-21730

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-240

ZDI-CAN-21728

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-239

ZDI-CAN-21535

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-238

ZDI-CAN-21745

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-237

ZDI-CAN-21738

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-236

ZDI-CAN-21735

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-235

ZDI-CAN-21744

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Type Confusion Remote Code Execution Vulnerability

ZDI-24-234

ZDI-CAN-21553

Ashlar-Vellum

(0Day) Ashlar-Vellum Cobalt STP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-233

ZDI-CAN-22789

Delta Electronics

CVE-2024-1941

Delta Electronics CNCSoft-B DPA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-232

ZDI-CAN-21978

Kofax

CVE-2024-27334

Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-231

ZDI-CAN-22925

Kofax

CVE-2024-27339

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-230

ZDI-CAN-22033

Kofax

CVE-2024-27337

Kofax Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-229

ZDI-CAN-21940

Linux

CVE-2023-52440

Linux Kernel ksmbd Session Key Exchange Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-228

ZDI-CAN-21541

Linux

CVE-2023-52441

Linux Kernel ksmbd Negotiate Request Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-227

ZDI-CAN-21506

Linux

CVE-2023-52442

Linux Kernel ksmbd Chained Request Improper Input Validation Information Disclosure Vulnerability

ZDI-24-226

ZDI-CAN-22934

Kofax

CVE-2024-27346

Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-225

ZDI-CAN-22932

Kofax

CVE-2024-27345

Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-224

ZDI-CAN-22931

Kofax

CVE-2024-27344

Kofax Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-223

ZDI-CAN-22929

Kofax

CVE-2024-27343

Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-222

ZDI-CAN-22928

Kofax

CVE-2024-27342

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-221

ZDI-CAN-22927

Kofax

CVE-2024-27341

Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-220

ZDI-CAN-22926

Kofax

CVE-2024-27340

Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-219

ZDI-CAN-22588

Kofax

CVE-2024-27338

Kofax Power PDF app response Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-218

ZDI-CAN-22022

Kofax

CVE-2024-27336

Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-217

ZDI-CAN-22018

Kofax

CVE-2024-27335

Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-216

ZDI-CAN-21976

Kofax

CVE-2024-27333

Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-215

ZDI-CAN-22955

SolarWinds

CVE-2024-0692

SolarWinds Security Event Manager AMF Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-214

ZDI-CAN-21775

NI

CVE-2024-1156

NI FlexLogger RabbitMQ Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI-24-213

ZDI-CAN-21773

NI

CVE-2024-1155

NI FlexLogger userservices Missing Authorization Local Privilege Escalation Vulnerability

ZDI-24-212

ZDI-CAN-21939

NI

CVE-2024-1155

NI FlexLogger TagHistorian Missing Authorization Local Privilege Escalation Vulnerability

ZDI-24-211

ZDI-CAN-21938

NI

CVE-2024-1155

NI FlexLogger DocumentManager Missing Authorization Local Privilege Escalation Vulnerability

ZDI-24-210

ZDI-CAN-21941

NI

CVE-2024-1155

NI FlexLogger SkylineService Missing Authorization Local Privilege Escalation Vulnerability

ZDI-24-209

ZDI-CAN-21772

NI

CVE-2024-1155

NI FlexLogger ServiceRegistry Missing Authorization Local Privilege Escalation Vulnerability

ZDI-24-208

ZDI-CAN-23012

Microsoft

 

Microsoft Azure MCR VSTS CLI vstscli Uncontrolled Search Path Element Remote Code Execution Vulnerability

ZDI-24-207

ZDI-CAN-22261

Apple

CVE-2023-42902

Apple macOS VideoToolbox Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-206

ZDI-CAN-21769

Apple

CVE-2023-42888

Apple macOS ImageIO MPO Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-205

ZDI-CAN-22277

PDF-XChange

CVE-2024-27327

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-204

ZDI-CAN-22276

PDF-XChange

CVE-2024-27326

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-203

ZDI-CAN-22275

PDF-XChange

CVE-2024-27325

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-202

ZDI-CAN-22280

PDF-XChange

CVE-2024-27328

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-201

ZDI-CAN-22287

PDF-XChange

CVE-2024-27331

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-200

ZDI-CAN-22285

PDF-XChange

CVE-2024-27329

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-199

ZDI-CAN-22286

PDF-XChange

CVE-2024-27330

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-198

ZDI-CAN-22224

PDF-XChange

CVE-2024-27323

PDF-XChange Editor Updater Improper Certificate Validation Remote Code Execution Vulnerability

ZDI-24-197

ZDI-CAN-22288

PDF-XChange

CVE-2024-27332

PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-196

ZDI-CAN-22270

PDF-XChange

CVE-2024-27324

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-195

ZDI-CAN-22991

Linux

CVE-2024-26592

Linux Kernel ksmbd TCP Connection Race Condition Remote Code Execution Vulnerability

ZDI-24-194

ZDI-CAN-22890

Linux

CVE-2024-26594

Linux Kernel ksmbd Mech Token Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-193

ZDI-CAN-21539

Sante

CVE-2024-1863

Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability

ZDI-24-192

ZDI-CAN-22161

Schneider Electric

CVE-2024-0865

Schneider Electric EcoStruxure IT Gateway Hard-Coded Credentials Local Privilege Escalation Vulnerability

ZDI-24-191

ZDI-CAN-22087

Schneider Electric

CVE-2024-0865

Schneider Electric EcoStruxure IT Gateway Hard-Coded Credentials Local Privilege Escalation Vulnerability

ZDI-24-190

ZDI-CAN-18983

Trimble

 

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-189

ZDI-CAN-18984

Trimble

 

Trimble SketchUp SKP File Parsing Use-After-Free Information Disclosure Vulnerability

ZDI-24-188

ZDI-CAN-19114

Trimble

 

Trimble SketchUp SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-187

ZDI-CAN-19112

Trimble

 

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-186

ZDI-CAN-19115

Trimble

 

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-185

ZDI-CAN-22029

Inductive Automation

CVE-2023-50233

Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability

ZDI-24-184

ZDI-CAN-22028

Inductive Automation

CVE-2023-50232

Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability

ZDI-24-183

ZDI-CAN-23030

Apache

CVE-2024-23946

Apache OFBiz createRegister Error Message Information Disclosure Vulnerability

ZDI-24-182

ZDI-CAN-22323

ESET

CVE-2024-0353

ESET Smart Security Premium ekrn Link Following Local Privilege Escalation Vulnerability

ZDI-24-181

ZDI-CAN-22060

Siemens

CVE-2024-24925

Siemens Simcenter Femap MODEL File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

ZDI-24-180

ZDI-CAN-22059

Siemens

CVE-2024-24924

Siemens Simcenter Femap MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-179

ZDI-CAN-22055

Siemens

CVE-2024-24923

Siemens Simcenter Femap MODEL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-24-178

ZDI-CAN-21715

Siemens

CVE-2024-24922

Siemens Simcenter Femap MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-177

ZDI-CAN-21712

Siemens

CVE-2024-24921

Siemens Simcenter Femap MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-176

ZDI-CAN-21710

Siemens

CVE-2024-24920

Siemens Simcenter Femap MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-175

ZDI-CAN-22783

Siemens

CVE-2024-23798

Siemens Tecnomatix Plant Simulation WRL File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-174

ZDI-CAN-22763

Siemens

CVE-2024-23797

Siemens Tecnomatix Plant Simulation WRL File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-173

ZDI-CAN-22759

Siemens

CVE-2024-23796

Siemens Tecnomatix Plant Simulation WRL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-172

ZDI-CAN-22758

Siemens

CVE-2024-23795

Siemens Tecnomatix Plant Simulation WRL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-171

ZDI-CAN-21894

SolarWinds

CVE-2023-50395

SolarWinds Orion Platform AppendUpdate SQL Injection Remote Code Execution Vulnerability

ZDI-24-170

ZDI-CAN-21895

SolarWinds

CVE-2023-35188

SolarWinds Orion Platform AppendCreatePrimary SQL Injection Remote Code Execution Vulnerability

ZDI-24-169

ZDI-CAN-22647

Adobe

CVE-2024-20739

Adobe Audition AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-168

ZDI-CAN-22727

Adobe

CVE-2024-20728

Adobe Acrobat Pro DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-167

ZDI-CAN-22516

Adobe

CVE-2024-20734

Adobe Acrobat Pro DC AcroForm Use-After-Free Information Disclosure Vulnerability

ZDI-24-166

ZDI-CAN-22822

Adobe

CVE-2024-20736

Adobe Acrobat Pro DC AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-165

ZDI-CAN-23100

Microsoft

CVE-2024-21412

Microsoft Windows Internet Shortcut SmartScreen Bypass Vulnerability

ZDI-24-164

ZDI-CAN-21970

Microsoft

CVE-2024-21379

Microsoft Office Word PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-163

ZDI-CAN-20875

Autodesk

CVE-2024-0446

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-162

ZDI-CAN-20874

Autodesk

 

Autodesk AutoCAD X_T File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

ZDI-24-161

ZDI-CAN-20873

Autodesk

CVE-2024-23123

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-160

ZDI-CAN-20879

Autodesk

CVE-2024-23136

Autodesk AutoCAD STP File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

ZDI-24-159

ZDI-CAN-20880

Autodesk

CVE-2024-23135

Autodesk AutoCAD SLDPRT File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-158

ZDI-CAN-20962

Autodesk

CVE-2024-23134

Autodesk AutoCAD IGES File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-157

ZDI-CAN-20961

Autodesk

CVE-2024-23129

Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-156

ZDI-CAN-20960

Autodesk

CVE-2024-23129

Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-155

ZDI-CAN-20959

Autodesk

CVE-2024-23134

Autodesk AutoCAD IGS File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-154

ZDI-CAN-20958

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-153

ZDI-CAN-20957

Autodesk

CVE-2024-23129

Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-152

ZDI-CAN-20956

Autodesk

CVE-2024-23132

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-151

ZDI-CAN-20955

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-150

ZDI-CAN-20954

Autodesk

CVE-2024-23127

Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-149

ZDI-CAN-20953

Autodesk

CVE-2024-23127

Autodesk AutoCAD SLDASM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-148

ZDI-CAN-20952

Autodesk

CVE-2024-23127

Autodesk AutoCAD 3DM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-147

ZDI-CAN-20951

Autodesk

CVE-2024-23126

Autodesk AutoCAD CATPART File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-146

ZDI-CAN-20950

Autodesk

CVE-2024-0446

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-145

ZDI-CAN-20948

Autodesk

CVE-2024-23127

Autodesk AutoCAD SLDASM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-144

ZDI-CAN-20947

Autodesk

CVE-2024-23122

Autodesk AutoCAD 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-143

ZDI-CAN-20946

Autodesk

CVE-2024-23121

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-142

ZDI-CAN-20945

Autodesk

CVE-2024-23137

Autodesk AutoCAD SLDPRT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

ZDI-24-141

ZDI-CAN-20905

Autodesk

CVE-2024-23124

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-140

ZDI-CAN-20885

Autodesk

CVE-2024-23127

Autodesk AutoCAD MODEL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-139

ZDI-CAN-20863

Autodesk

CVE-2024-23131

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-138

ZDI-CAN-20862

Autodesk

CVE-2024-23130

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-137

ZDI-CAN-20861

Autodesk

CVE-2024-23129

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-136

ZDI-CAN-20860

Autodesk

CVE-2024-23128

Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-135

ZDI-CAN-20900

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-134

ZDI-CAN-20899

Autodesk

CVE-2024-23131

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-133

ZDI-CAN-20898

Autodesk

CVE-2024-23130

Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-132

ZDI-CAN-20896

Autodesk

CVE-2024-23129

Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-131

ZDI-CAN-20895

Autodesk

CVE-2024-23123

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-130

ZDI-CAN-20894

Autodesk

CVE-2024-23131

Autodesk AutoCAD STEP File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-129

ZDI-CAN-20893

Autodesk

CVE-2024-23128

Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-128

ZDI-CAN-20859

Autodesk

CVE-2024-23127

Autodesk AutoCAD MODEL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-127

ZDI-CAN-20858

Autodesk

CVE-2024-23125

Autodesk AutoCAD SLDPRT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-126

ZDI-CAN-20878

Autodesk

CVE-2024-23120

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-125

ZDI-CAN-20876

Autodesk

CVE-2024-0446

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-124

ZDI-CAN-20877

Autodesk

CVE-2024-0446

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-123

ZDI-CAN-22664

X.Org

CVE-2023-6816

X.Org Server DeviceFocusEvent Improper Validation of Array Index Local Privilege Escalation Vulnerability

ZDI-24-122

ZDI-CAN-22665

X.Org

CVE-2023-6816

X.Org Server XIQueryPointer Improper Validation of Array Index Local Privilege Escalation Vulnerability

ZDI-24-121

ZDI-CAN-22678

X.Org

CVE-2024-0229

X.Org Server DeliverStateNotifyEvent Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-24-120

ZDI-CAN-22744

X.Org

CVE-2024-21885

X.Org Server XISendDeviceHierarchyEvent Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-24-119

ZDI-CAN-22840

X.Org

CVE-2024-21886

X.Org Server DisableDevice Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-24-118

ZDI-CAN-22294

Centreon

CVE-2024-0637

Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability

ZDI-24-117

ZDI-CAN-22295

Centreon

CVE-2024-23115

Centreon updateGroups SQL Injection Remote Code Execution Vulnerability

ZDI-24-116

ZDI-CAN-22296

Centreon

CVE-2024-23116

Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability

ZDI-24-115

ZDI-CAN-22297

Centreon

CVE-2024-23117

Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

ZDI-24-114

ZDI-CAN-22298

Centreon

CVE-2024-23118

Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability

ZDI-24-113

ZDI-CAN-22339

Centreon

CVE-2024-23119

Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability

ZDI-24-112

ZDI-CAN-22507

Allegra

CVE-2023-52334

Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability

ZDI-24-111

ZDI-CAN-22360

Allegra

CVE-2023-51638

Allegra Hard-coded Credentials Authentication Bypass Vulnerability

ZDI-24-110

ZDI-CAN-22361

Allegra

CVE-2023-51639

Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability

ZDI-24-109

ZDI-CAN-22527

Allegra

CVE-2023-51646

Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-108

ZDI-CAN-22528

Allegra

CVE-2023-51647

Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability

ZDI-24-107

ZDI-CAN-22504

Allegra

CVE-2023-51640

Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-106

ZDI-CAN-22505

Allegra

CVE-2023-51641

Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability

ZDI-24-105

ZDI-CAN-22506

Allegra

CVE-2023-51642

Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-104

ZDI-CAN-22548

Allegra

CVE-2023-52333

Allegra saveFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-103

ZDI-CAN-22510

Allegra

CVE-2023-51643

Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-102

ZDI-CAN-22512

Allegra

CVE-2023-51644

Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability

ZDI-24-101

ZDI-CAN-22513

Allegra

CVE-2023-51645

Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability

ZDI-24-100

ZDI-CAN-22532

Allegra

CVE-2023-52332

Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability

ZDI-24-099

ZDI-CAN-22530

Allegra

CVE-2023-51648

Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability

ZDI-24-098

ZDI-CAN-21065

Schneider Electric

CVE-2023-7032

Schneider Electric Easergy Studio InitializeChannel Deserialization of Untrusted Data Local Privilege Escalation Vulnerability

ZDI-24-097

ZDI-CAN-22015

Wazuh

CVE-2023-42463

Wazuh Log Collector Integer Underflow Local Privilege Escalation Vulnerability

ZDI-24-096

ZDI-CAN-21848

Oracle

CVE-2024-20953

Oracle Product Lifecycle Management ExportServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-095

ZDI-CAN-22658

Canon

CVE-2024-0244

Canon imageCLASS MF753Cdw Fax Job Heap-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-094

ZDI-CAN-22533

Canon

CVE-2023-6234

(Pwn2Own) Canon imageCLASS MF753Cdw CADM setResource Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-093

ZDI-CAN-22389

Canon

CVE-2023-6233

(Pwn2Own) Canon imageCLASS MF753Cdw SLP service-url Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-092

ZDI-CAN-22386

Canon

CVE-2023-6232

(Pwn2Own) Canon imageCLASS MF753Cdw rls-login Authorization Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-091

ZDI-CAN-22381

Canon

CVE-2023-6231

(Pwn2Own) Canon imageCLASS MF753Cdw Probe message Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-090

ZDI-CAN-22391

Canon

CVE-2023-6230

(Pwn2Own) Canon imageCLASS MF753Cdw rls-login Authorization Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-089

ZDI-CAN-22403

Canon

CVE-2023-6229

(Pwn2Own) Canon imageCLASS MF753Cdw CADM rmSetFileName Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-088

ZDI-CAN-22440

Western Digital

CVE-2023-22819

(Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Uncontrolled Resource Consumption Denial-of-Service Vulnerability

ZDI-24-087

ZDI-CAN-22456

Western Digital

CVE-2023-22817

(Pwn2Own) Western Digital MyCloud PR4100 RESTSDK Server-Side Request Forgery Vulnerability

ZDI-24-086

ZDI-CAN-22227

TP-Link

CVE-2024-1180

TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability

ZDI-24-085

ZDI-CAN-22420

TP-Link

CVE-2024-1179

(Pwn2Own) TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-084

ZDI-CAN-22520

Lexmark

CVE-2023-50737

(Pwn2Own) Lexmark CX331adwe Missing Authentication Remote Code Execution Vulnerability

ZDI-24-083

ZDI-CAN-22445

Lexmark

CVE-2023-50736

(Pwn2Own) Lexmark CX331adwe PostScript File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-082

ZDI-CAN-22443

Lexmark

CVE-2023-50735

(Pwn2Own) Lexmark CX331adwe PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI-24-081

ZDI-CAN-22380

Lexmark

CVE-2023-50734

(Pwn2Own) Lexmark CX331adwe make42charstring Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-080

ZDI-CAN-20806

Trend Micro

CVE-2023-41178

Trend Micro Mobile Security for Enterprises vpplist_assign_list Cross-Site Scripting Vulnerability

ZDI-24-079

ZDI-CAN-20805

Trend Micro

CVE-2023-41177

Trend Micro Mobile Security for Enterprises ServerUpdate_UpdateSuccessful Cross-Site Scripting Vulnerability

ZDI-24-078

ZDI-CAN-20804

Trend Micro

CVE-2023-41176

Trend Micro Mobile Security for Enterprises DevicesManagementEditNotePopupTip Cross-Site Scripting Vulnerability

ZDI-24-077

ZDI-CAN-20803

Trend Micro

CVE-2023-52324

Trend Micro Apex Central Unrestricted File Upload Vulnerability

ZDI-24-076

ZDI-CAN-21780

Trend Micro

CVE-2023-52338

Trend Micro Deep Security Link Following Local Privilege Escalation Vulnerability

ZDI-24-075

ZDI-CAN-16568

Trend Micro

CVE-2023-52337

Trend Micro Deep Security Improper Access Control Local Privilege Escalation Vulnerability

ZDI-24-074

ZDI-CAN-18868

Trend Micro

CVE-2023-52329

Trend Micro Apex Central Cross-Site Scripting Remote Code Execution Vulnerability

ZDI-24-073

ZDI-CAN-21182

Paessler

CVE-2023-51630

Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability

ZDI-24-072

ZDI-CAN-19708

Synology

CVE-2024-21473

Synology RT6600ax Qualcomm LDB Service Improper Input Validation Remote Code Execution Vulnerability

ZDI-24-071

ZDI-CAN-22643

Ivanti

CVE-2023-46804

Ivanti Avalanche WLAvalancheService Integer Underflow Denial-of-Service Vulnerability

ZDI-24-070

ZDI-CAN-22582

Ivanti

CVE-2023-46223

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-069

ZDI-CAN-22581

Ivanti

CVE-2023-46222

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-068

ZDI-CAN-22580

Ivanti

CVE-2023-46221

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-067

ZDI-CAN-22544

Ivanti

CVE-2023-46803

Ivanti Avalanche WLAvalancheService Divide By Zero Denial-of-Service Vulnerability

ZDI-24-066

ZDI-CAN-22553

Ivanti

CVE-2023-46220

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-065

ZDI-CAN-22586

Ivanti

CVE-2023-46258

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-064

ZDI-CAN-22585

Ivanti

CVE-2023-46257

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-063

ZDI-CAN-22584

Ivanti

CVE-2023-46225

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-062

ZDI-CAN-22583

Ivanti

CVE-2023-46224

Ivanti Avalanche WLAvalancheService Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-061

ZDI-CAN-21972

Ivanti

CVE-2023-46259

Ivanti Avalanche WLAvalancheService TV_FC Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-060

ZDI-CAN-21992

Ivanti

CVE-2023-46260

Ivanti Avalanche WLAvalancheService TV_NL Null Pointer Dereference Denial-of-Service Vulnerability

ZDI-24-059

ZDI-CAN-22000

Ivanti

CVE-2023-46261

Ivanti Avalanche WLInfoRailService Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-058

ZDI-CAN-21953

Ivanti

CVE-2021-22962

Ivanti Avalanche SecureFilter allowPassThrough Authentication Bypass Vulnerability

ZDI-24-057

ZDI-CAN-21943

Ivanti

CVE-2023-46266

Ivanti Avalanche SecureFilter Content-Type Authentication Bypass Vulnerability

ZDI-24-056

ZDI-CAN-21952

Ivanti

CVE-2023-46263

Ivanti Avalanche FileStoreConfig Arbitrary File Upload Remote Code Execution Vulnerability

ZDI-24-055

ZDI-CAN-22001

Ivanti

CVE-2023-46264

Ivanti Avalanche FileStoreConfig Arbitrary File Upload Remote Code Execution Vulnerability

ZDI-24-054

ZDI-CAN-21458

Ivanti

CVE-2023-46265

Ivanti Avalanche decode XML External Entity Processing Information Disclosure Vulnerability

ZDI-24-053

ZDI-CAN-21406

Ivanti

CVE-2023-46262

Ivanti Avalanche validateAMCWSConnection Server-Side Request Forgery Information Disclosure Vulnerability

ZDI-24-052

ZDI-CAN-21888

Trend Micro

CVE-2023-52331

Trend Micro Apex Central modVulnerabilityProtect Server-Side Request Forgery Information Disclosure Vulnerability

ZDI-24-051

ZDI-CAN-21447

Trend Micro

CVE-2023-52330

Trend Micro Apex Central Cross-Site Scripting Privilege Escalation Vulnerability

ZDI-24-050

ZDI-CAN-21675

D-Link

CVE-2023-51631

D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-049

ZDI-CAN-21492

D-Link

CVE-2023-51629

D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability

ZDI-24-048

ZDI-CAN-21322

D-Link

CVE-2023-51628

D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-047

ZDI-CAN-21321

D-Link

CVE-2023-51627

D-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-046

ZDI-CAN-21320

D-Link

CVE-2023-51626

D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-045

ZDI-CAN-21319

D-Link

CVE-2023-51625

D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command Injection Remote Code Execution Vulnerability

ZDI-24-044

ZDI-CAN-20072

D-Link

CVE-2023-51624

D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-043

ZDI-CAN-21673

D-Link

CVE-2023-51623

D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-042

ZDI-CAN-21672

D-Link

CVE-2023-51622

D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-041

ZDI-CAN-21670

D-Link

CVE-2023-51621

D-Link DIR-X3260 prog.cgi SetDeviceSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-040

ZDI-CAN-21669

D-Link

CVE-2023-51620

D-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-039

ZDI-CAN-21667

D-Link

CVE-2023-51619

D-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-038

ZDI-CAN-21595

D-Link

CVE-2023-51618

D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-037

ZDI-CAN-21594

D-Link

CVE-2023-51617

D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-036

ZDI-CAN-21593

D-Link

CVE-2023-51616

D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-035

ZDI-CAN-21592

D-Link

CVE-2023-51615

D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-034

ZDI-CAN-21591

D-Link

CVE-2023-51614

D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-033

ZDI-CAN-21590

D-Link

CVE-2023-51613

D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-032

ZDI-CAN-22109

Foxit

 

Foxit PDF Reader Doc Use-After-Free Remote Code Execution Vulnerability

ZDI-24-031

ZDI-CAN-22126

Microsoft

CVE-2024-21310

Microsoft Windows cldflt Integer Overflow Local Privilege Escalation Vulnerability

ZDI-24-030

ZDI-CAN-21445

Microsoft

CVE-2024-20677

Microsoft Office Word FBX File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-029

ZDI-CAN-21860

Trend Micro

CVE-2023-52093

Trend Micro Apex One Exposed Dangerous Function Local Privilege Escalation Vulnerability

ZDI-24-028

ZDI-CAN-21896

Trend Micro

CVE-2023-52094

Trend Micro Apex One Security Agent Updater Link Following Local Privilege Escalation Vulnerability

ZDI-24-027

ZDI-CAN-21522

Trend Micro

CVE-2023-52091

Trend Micro Apex One Anti-Spyware Engine Link Following Local Privilege Escalation Vulnerability

ZDI-24-026

ZDI-CAN-21425

Trend Micro

CVE-2023-52090

Trend Micro Apex One Virus Scan Engine Link Following Local Privilege Escalation Vulnerability

ZDI-24-025

ZDI-CAN-21346

Trend Micro

CVE-2023-52092

Trend Micro Apex One Link Following Local Privilege Escalation Vulnerability

ZDI-24-024

ZDI-CAN-21327

Trend Micro

CVE-2023-52325

Trend Micro Apex Central widget WFProxy Local File Inclusion Remote Code Execution Vulnerability

ZDI-24-023

ZDI-CAN-18873

Trend Micro

CVE-2023-52326

Trend Micro Apex Central Cross-Site Scripting Remote Code Execution Vulnerability

ZDI-24-022

ZDI-CAN-18869

Trend Micro

CVE-2023-52327

Trend Micro Apex Central Cross-Site Scripting Remote Code Execution Vulnerability

ZDI-24-021

ZDI-CAN-18870

Trend Micro

CVE-2023-52328

Trend Micro Apex Central Cross-Site Scripting Remote Code Execution Vulnerability

ZDI-24-020

ZDI-CAN-20527

Linux

CVE-2023-6546

Linux Kernel GSM Multiplexing Race Condition Local Privilege Escalation Vulnerability

ZDI-24-019

ZDI-CAN-19067

Bentley

CVE-2023-44430

Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-018

ZDI-CAN-22127

Inductive Automation

CVE-2023-50223

Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-017

ZDI-CAN-22067

Inductive Automation

CVE-2023-50222

Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-016

ZDI-CAN-21926

Inductive Automation

CVE-2023-50221

Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-015

ZDI-CAN-21801

Inductive Automation

CVE-2023-50220

Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-014

ZDI-CAN-21625

Inductive Automation

CVE-2023-50219

Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-24-013

ZDI-CAN-21016

oFono

CVE-2023-4235

oFono SMS Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-012

ZDI-CAN-22153

X.Org

CVE-2023-5367

X.Org Server ProcXIChangeProperty Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-24-011

ZDI-CAN-22412

X.Org

CVE-2023-6377

X.Org Server RecalculateMasterButtons Out-Of-Bounds Access Local Privilege Escalation Vulnerability

ZDI-24-010

ZDI-CAN-22413

X.Org

CVE-2023-6377

X.Org Server DeepCopyPointerClasses Out-Of-Bounds Access Local Privilege Escalation Vulnerability

ZDI-24-009

ZDI-CAN-22561

X.Org

CVE-2023-6478

X.Org Server RRChangeOutputProperty Integer Overflow Information Disclosure Vulnerability

ZDI-24-008

ZDI-CAN-22753

SolarWinds

CVE-2023-40058

SolarWinds Access Rights Manager Hardcoded Credentials Authentication Bypass Vulnerability

ZDI-24-007

ZDI-CAN-22016

Kofax

CVE-2023-51569

Kofax Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-24-006

ZDI-CAN-21988

Kofax

CVE-2023-51567

Kofax Power PDF OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-005

ZDI-CAN-21990

Kofax

CVE-2023-51568

Kofax Power PDF OXPS File Parsing Use-After-Free Information Disclosure Vulnerability

ZDI-24-004

ZDI-CAN-21980

Kofax

CVE-2023-51566

Kofax Power PDF OXPS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-24-003

ZDI-CAN-21975

Kofax

CVE-2023-51565

Kofax Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-24-002

ZDI-CAN-21606

Kofax

CVE-2023-51564

Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-24-001

ZDI-CAN-20573

Kofax

CVE-2023-51563

Kofax Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability