CVE-2024-28827 : CHECKMK UP TO 2.0.0P39/2.1.0P44/2.2.0P28/2.3.0P7 ON WINDOWS PERMISSION ASSIGNMENT
Description Incorrect permissions on the Checkmk Windows Agent’s data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and
CVE-2024-3799 : PHONIEBOX UP TO 2.7 HEADER PARAMETER OS COMMAND INJECTION
Description Insecure handling of POST header parameter body included in requests being sent to an instance of the open-source project
CVE-2024-6422 : PEPPERL+FUCHS OIT1500-F113-B12-CB UP TO 2.11.0 TELNET MISSING AUTHENTICATION
Description An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data. References https://cert.vde.com/en/advisories/VDE-2024-038
CVE-2024-39493 : LINUX KERNEL UP TO 6.9.4 CRYPTO ADF_DEV_RESET_SYNC MEMORY LEAK
Description In the Linux kernel, the following vulnerability has been resolved: crypto: qat – Fix ADF_DEV_RESET_SYNC memory leak Using completion_done
CVE-2024-6556 : SMARTCRAWL SEO CHECKER, SEO ANALYZER, SEO OPTIMIZER PLUGIN INFORMATION DISCLOSURE
Description The SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin for WordPress is vulnerable to Full Path Disclosure in
CVE-2024-39069 : IFOOD ORDER MANAGER 3.35.5 GESTOR DE PEDDIOS.EXE UNCONTROLLED SEARCH PATH
Description An issue in ifood Order Manager v3.35.5 ‘Gestor de Peddios.exe’ allows attackers to execute arbitrary code via a DLL
CVE-2024-38301 : DELL ALIENWARE COMMAND CENTER UP TO 5.7.3.0 UNKNOWN VULNERABILITY
Description Dell Alienware Command Center, version 5.7.3.0 and prior, contains an improper access control vulnerability. A low privileged attacker could
CVE-2024-21522 : AUDIFY OPUSDECODER.DECODE/OPUSDECODER.DECODEFLOAT ARRAY INDEX
Description All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to
CVE-2024-21524 : NODE-STRINGBUILDER TOBUFFER/TOSTRING/CHARAT OUT-OF-BOUNDS
Description All versions of the package node-stringbuilder are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling
CVE-2024-21521 : DISCORDJS OPUS TOSTRING RESOURCE CONSUMPTION
Description All versions of the package @discordjs/opus are vulnerable to Denial of Service (DoS) due to providing an input object