|
1931
|
7.8 |
HIGH
Local
|
autodesk
|
autocad
autocad_advance_steel
autocad_architecture
autocad_civil_3d
autocad_electrical
autocad_mechanical
autocad_mep
autocad_plant_3d
|
A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force an Out-of-Bound Write vulnerability. A malicious actor can leverage this vulnerability to cause a cras…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-8596
|
2024-11-2 01:17 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1932
|
7.8 |
HIGH
Local
|
autodesk
|
autocad
autocad_advance_steel
autocad_architecture
autocad_civil_3d
autocad_electrical
autocad_mechanical
autocad_mep
autocad_plant_3d
|
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a cra…
|
CWE-125
Out-of-bounds Read
|
CVE-2024-8588
|
2024-11-2 01:16 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1933
|
8.8 |
HIGH
Network
|
tenda
|
rx9_pro_firmware
|
A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It has been rated as critical. This issue affects the function sub_424CE0 of the file /goform/setMacFilterCfg of the component POST Request Han…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-10351
|
2024-11-2 01:15 |
2024-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1934
|
6.1 |
MEDIUM
Network
|
microchip
|
timeprovider_4100_firmware
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Microchip TimeProvider 4100 allows XSS Through HTTP Headers.This issue affects TimeProvider 4100: from 1.0.
|
CWE-601
Open Redirect
|
CVE-2024-43683
|
2024-11-2 01:15 |
2024-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1935
|
7.5 |
HIGH
Network
mayurik
|
petrol_pump_management
|
A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/ajax_p…
|
CWE-89
SQL Injection
|
CVE-2024-10380
|
2024-11-2 01:11 |
2024-10-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
|
1936
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix uninitialized pointer free in add_inode_ref()
The add_inode_ref() function does not initialize the "name" struct when
…
|
CWE-824
Access of Uninitialized Pointer
|
CVE-2024-50088
|
2024-11-2 01:05 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1937
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Call iso_exit() on module unload
If iso_init() has been called, iso_exit() must be called on module
unload. Without th…
|
NVD-CWE-noinfo
|
CVE-2024-50078
|
2024-11-2 01:01 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1938
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: Fix multiple init when debugfs is disabled
If bt_debugfs is not created successfully, which happens if either
CON…
|
NVD-CWE-noinfo
|
CVE-2024-50077
|
2024-11-2 01:00 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1939
|
6.5 |
MEDIUM
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
vt: prevent kernel-infoleak in con_font_get()
font.data may not initialize all memory spaces depending on the implementation
of v…
|
CWE-909
Missing Initialization of Resource
|
CVE-2024-50076
|
2024-11-2 00:57 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1940
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
xhci: tegra: fix checked USB2 port number
If USB virtualizatoin is enabled, USB2 ports are shared between all
Virtual Functions. …
|
NVD-CWE-noinfo
|
CVE-2024-50075
|
2024-11-2 00:51 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
