CVEs published August 14, 2024
204 CVEs were published on August 14, 2024: 11 critical, 70 high.
- Published
- 204
- Critical
- 11
- High
- 70
- Medium
- 122
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 51
Most affected products
- Adobe Commerce · magento/project-community-edition +1
- 17
- Adobe Acrobat Reader
- 13
- Adobe InDesign Desktop
- 13
- Adobe Illustrator
- 8
- Zoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- 8
- Adobe Dimension
- 6
- Adobe Commerce · magento/community-edition
- 5
- Intel(R) Ethernet Network Controllers and Adapters
- 5
- Ivanti Avalanche
- 5
- Adobe Substance3D - Sampler
- 4
Critical 11
- CVE-2024-42360Command Injection in sequenceserverwurmlab sequenceserver · sequenceserver
- CVE-2024-21807Improper initialization in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may Intel(R) Ethernet Network Controllers and Adapters
- CVE-2024-24986Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may alloIntel(R) Ethernet Network Controllers and Adapters
- CVE-2024-23981Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an aIntel(R) Ethernet Network Controllers and Adapters
- CVE-2024-23497Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow anIntel(R) Ethernet Network Controllers and Adapters
- CVE-2024-21810Improper input validation in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 maIntel(R) Ethernet Network Controllers and Adapters
- CVE-2024-39397Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)Adobe Commerce
- CVE-2024-7732SECOM Dr.ID Attendance system - Unrestricted File UploadSECOM Dr.ID Attendance system
- CVE-2024-7731SECOM Dr.ID Access control system - SQL injectionSECOM Dr.ID Access control system
- CVE-2024-20083In venc, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6765, MT6768, MT6779, MT6785, MT8321, MT8385, MT…
- CVE-2024-20082In Modem, there is a possible memory corruption due to a missing bounds check.MediaTek MT2735, MT2737, MT6833, MT6835, MT6835T, MT6853, M…
High 70
- CVE-2024-27120Local File Inclusion in ComfortKey before version 24.1.2Celsius Benelux ComfortKey
- CVE-2024-40619Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet HandlingRockwell Automation ControlLogix® · Rockwell Automation Gua…
- CVE-2024-7513Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File PermissionsRockwell Automation FactoryTalk View Site Edition
- CVE-2024-6078Rockwell Automation Authentication Bypass Vulnerability in DataMosaix™Rockwell Automation DataMosaix™
- CVE-2024-7515Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input ValidationRockwell Automation CompactLogix · Rockwell Automation C… +2
- CVE-2024-7507Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input ValidationRockwell Automation CompactLogix · Rockwell Automation C… +2
- CVE-2024-5914Cortex XSOAR: Command Injection in CommonScripts PackPalo Alto Networks Cortex XSOAR CommonScripts
- CVE-2024-39818Zoom Workplace Apps and SDKs - Protection Mechanism FailureZoom Communications Zoom Workplace Apps and SDKs
- CVE-2024-39825Zoom Workplace Apps and Rooms Clients - Buffer OverflowZoom Communications Zoom Workplace Apps and Rooms Clients
- CVE-2024-39426ZDI-CAN-24312: Adobe Acrobat Reader DC Annotation Memory Corruption Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2024-39422ZDI-CAN-24090: New Vulnerability Report - Use-after-free remote code execution vulnerability in Adobe Acrobat Reader DCAdobe Acrobat Reader
- CVE-2024-41831ZDI-CAN-24569: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2024-39423ZDI-CAN-24182: New Vulnerability Report - Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2024-39420Acrobat Reader | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)Adobe Acrobat Reader
- CVE-2024-39424ZDI-CAN-24309: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2024-41830Talos Security Advisory for Adobe (TALOS-2024-2009)Adobe Acrobat Reader
- CVE-2024-39383PoC sample of unknown vulnerability detected by EXPMON systemAdobe Acrobat Reader
- CVE-2024-39425Security vulnerability in AdobeARMHelperAdobe Acrobat Reader
- CVE-2024-41850Adobe Indesign 2024 TIF File Parsing Heap Memory CorruptionAdobe InDesign Desktop
- CVE-2024-39391Adobe Indesign XLS File Parsing Out Of Bound Write Remote Code execution vulnerabilityAdobe InDesign Desktop
- CVE-2024-39390Adobe Indesign 2024 DOC File Parsing Memory CorruptionAdobe InDesign Desktop
- CVE-2024-41852Adobe Indesign 2024 AVI File Parsing Stack Based Buffer OverflowAdobe InDesign Desktop
- CVE-2024-41853Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution VulnerabilityAdobe InDesign Desktop
- CVE-2024-41851Adobe InDesign (Beta) has an integer overflow vulnerability when parsing SVG fileAdobe InDesign Desktop
- CVE-2024-39393Adobe Indesign 2024 PCT File Parsing Memory Corruption Remote Code Execution VulnerabilityAdobe InDesign Desktop
- CVE-2024-39389Adobe Indesign PDF File Parsing Stack Based Buffer Overflow Remote Code Execution VulnerabilityAdobe InDesign Desktop
- CVE-2024-39394Adobe Indesign 2024 PDF File Parsing Out Of Bound Write Remote Code Execution VulnerabilityAdobe InDesign Desktop
- CVE-2024-39388ZDI-CAN-24055: Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Substance3D - Stager
- CVE-2024-41840ZDI-CAN-24607: Adobe Bridge JP2 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2024-39386ZDI-CAN-24057: Adobe Bridge AVI FIle Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2024-34117Adobe Photoshop 2024 MPO File Parsing Use-After-Free vulnerabilityAdobe Photoshop Desktop
- CVE-2024-41856Illustrator | Improper Input Validation (CWE-20)Adobe Illustrator
- CVE-2024-34133Adobe Illustrator CC 2023 v27.9 Vulnerability IAdobe Illustrator
- CVE-2024-41865Adobe Dimension Untrusted Search Path lead to load malicious DLL swift.dllAdobe Dimension
- CVE-2024-20789ZDI-CAN-24030: Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2024-34124ZDI-CAN-24031: Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2024-42259drm/i915/gem: Fix Virtual Memory mapping boundaries calculationLinux
- CVE-2024-39792NGINX Plus MQTT vulnerabilityF5 NGINX Plus
- CVE-2024-39809BIG-IP Next Central Manager vulnerabilityF5 BIG-IP Next Central Manager
- CVE-2024-41727BIG-IP TMM vulnerabilityF5 BIG-IP
- CVE-2024-39778BIG-IP HSB vulnerabilityF5 BIG-IP
- CVE-2024-21787Inadequate encryption strength for some BMRA software before version 22.08 may allow an authenticated user to potentially enable escalation BMRA software
- CVE-2024-23499Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before versIntel(R) Ethernet Network Controllers and Adapters E810 Ser…
- CVE-2024-24983Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 4.4 may alloIntel(R) Ethernet Network Controllers and Adapters E810 Ser…
- CVE-2024-39283Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user toIntel(R) TDX module software
- CVE-2024-34163Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via locIntel(R) NUC
- CVE-2023-42667Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escIntel(R) Core(TM) Ultra Processor stream cache mechanism
- CVE-2023-49141Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of prIntel(R) Processors stream cache mechanism
- CVE-2024-21801Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentIntel(R) TDX module software
- CVE-2023-49144Out of bounds read in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user tIntel(R) Server Platforms
- CVE-2024-24853Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a priviIntel(R) Processor
- CVE-2024-25576improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to enable escalation of Intel(R) FPGA products
- CVE-2024-28947Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow aIntel(R) Server Board S2600ST Family firmware
- CVE-2024-26022Improper access control in some Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC may allow an authenticated user to potentially enIntel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC
- CVE-2024-39403Stored XSS through Webhook module public key configurationAdobe Commerce · magento/project-community-edition +1
- CVE-2024-39399[Paris] Path Traversal lead to local file readAdobe Commerce · magento/project-community-edition +1
- CVE-2024-39398OTP 2FA can be bruteforcedAdobe Commerce · magento/project-community-edition +1
- CVE-2024-39401Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Commerce · magento/project-community-edition +1
- CVE-2024-39402Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Commerce · magento/project-community-edition +1
- CVE-2024-39400DOM XSS through integrations can impact other adminsAdobe Commerce · magento/project-community-edition +1
- CVE-2024-4389Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Uploadaverta Depicter — Popup & Slider Builder
- CVE-2024-41864Adobe Substance 3D Designer ICO Parsing Out-Of-Bounds Write VulnerabilityAdobe Substance3D - Designer
- CVE-2024-41858Adobe InCopy has an integer overflow vulnerability when parsing SVG fileAdobe InCopy
- CVE-2024-7729CAYIN Technology CMS - Sensitive File DownloadCAYIN Technology SMP-2100 · CAYIN Technology SMP-2200 +11
- CVE-2024-7728CAYIN Technology CMS - OS Command InjectionCAYIN Technology CMS-SE
- CVE-2024-38652Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to achieve denial of servIvanti Avalanche
- CVE-2024-37373Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achIvanti Avalanche
- CVE-2024-37399A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, reIvanti Avalanche
- CVE-2024-38653XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.Ivanti Avalanche
- CVE-2024-36136An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting Ivanti Avalanche
Medium, low and unrated 123
- CVE-2024-7800SourceCodester Simple Online Bidding System ajax.php sql injectionSourceCodester Simple Online Bidding System
- CVE-2024-7799SourceCodester Simple Online Bidding System users.php improper authorizationSourceCodester Simple Online Bidding System
- CVE-2024-7625Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive UnpackingHashiCorp Nomad · github.com/hashicorp/nomad
- CVE-2024-7798SourceCodester Simple Online Bidding System ajax.php sql injectionSourceCodester Simple Online Bidding System
- CVE-2024-7797SourceCodester Simple Online Bidding System ajax.php sql injectionSourceCodester Simple Online Bidding System
- CVE-2024-43368Trix has a Cross-Site Scripting (XSS) vulnerability on copy & pastebasecamp trix · trix
- CVE-2024-7794itsourcecode Vehicle Management System mybill.php sql injectionitsourcecode Vehicle Management System
- CVE-2024-7793SourceCodester Task Progress Tracker add-task.php cross site scriptingSourceCodester Task Progress Tracker
- CVE-2024-42353WebOb's location header normalization during redirect leads to open redirectPylons webob · webob
- CVE-2024-40620Rockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocolRockwell Automation Pavilion8®
- CVE-2024-7792SourceCodester Task Progress Tracker delete-task.php sql injectionSourceCodester Task Progress Tracker
- CVE-2024-31882IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2024-37529IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2024-35152IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2024-35136IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-50314IBM WebSphere Application Server Libery information disclosureIBM WebSphere Application Liberty
- CVE-2023-50315IBM WebSphere Application Server information disclosureIBM WebSphere Application Server
- CVE-2024-42441Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege AssignmentZoom Communications Zoom Workplace Desktop App for macOS, Z…
- CVE-2024-42440Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Improper Privilege ManagementZoom Communications Zoom Workplace Desktop App for macOS, Z…
- CVE-2024-42439Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search PathZoom Communications Zoom Workplace Desktop App for macOS an…
- CVE-2024-42438Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer OverflowZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-5916PAN-OS: Cleartext Exposure of External System SecretsPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2024-42437Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer OverflowZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-42436Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer OverflowZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-5915GlobalProtect App: Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks GlobalProtect App
- CVE-2024-42435Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information ExposureZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-42434Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing AuthorizationZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-39824Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing AuthorizationZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-39823Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Missing AuthorizationZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-39822Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information ExposureZoom Communications Zoom Workplace Apps, SDKs, Rooms Client…
- CVE-2024-27267IBM SDK, Java Technology Edition denial of serviceIBM SDK, Java Technology Edition
- CVE-2024-28799IBM QRadar Suite Software information disclosureIBM QRadar Suite Software · IBM Cloud Pak for Security
- CVE-2024-41832TALOS-2024-2002 | Adobe Acrobat Reader Font gvar TupleVariation Data Out-Of-Bounds Read VulnerabilityAdobe Acrobat Reader
- CVE-2024-41834ZDI-CAN-24311: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2024-41835TALOS-2024-2003 | Adobe Acrobat Reader Font Packed Point Numbers Out-Of-Bounds Read VulnerabilityAdobe Acrobat Reader
- CVE-2024-41833ZDI-CAN-24310: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2024-34127Adobe Indesign TIF File Parsing Out Of Bound ReadAdobe InDesign Desktop
- CVE-2024-41854Adobe Indesign 2024 PDF File parsing memory corruptionAdobe InDesign Desktop
- CVE-2024-41866Adobe Indesign 2024 DOC File Parsing Null Pointer DereferenceAdobe InDesign Desktop
- CVE-2024-39395Adobe Indesign 2024 DOC File Parsing Null Pointer DereferenceAdobe InDesign Desktop
- CVE-2024-25157Authentication bypass in GoAnywhere MFT prior to 7.6.0Fortra GoAnywhere MFT
- CVE-2024-39387ZDI-CAN-24047: Adobe Bridge AVI FIle Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Bridge
- CVE-2024-34134Illustrator | Out-of-bounds Read (CWE-125)Adobe Illustrator
- CVE-2024-34136Adobe Illustrator PSD File Parsing Null Pointer dereferenceAdobe Illustrator
- CVE-2024-34118Adobe illustrator 2024 TIF File parsing Division by zero denial of serviceAdobe Illustrator
- CVE-2024-34138Adobe Illustrator CGM File Parsing Division By zeroAdobe Illustrator
- CVE-2024-34137Adobe Illustrator 2024 CGM File Parsing Null Pointer DereferenceAdobe Illustrator
- CVE-2024-34135Adobe Illustrator CC 2023 v27.9 Vulnerability IIAdobe Illustrator
- CVE-2024-34125ZDI-CAN-24027: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Dimension
- CVE-2024-34126ZDI-CAN-24028: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Dimension
- CVE-2024-20790Adobe Dimension Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing FBX fileAdobe Dimension
- CVE-2024-7347NGINX MP4 module vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2024-37028BIG-IP Next Central Manager vulnerabilityF5 BIG-IP Next Central Manager
- CVE-2024-41719BIG-IP Next Central Manager vulnerabilityF5 BIG-IP Next Central Manager
- CVE-2024-41164BIG-IP MPTCP vulnerabilityF5 BIG-IP
- CVE-2024-41723BIG-IP iControl REST vulnerabilityF5 BIG-IP
- CVE-2024-7790DevikaAI Stored Cross-Site ScriptingDevikia DevikaAI
- CVE-2024-21806Improper conditions check in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before versionIntel(R) Ethernet Network Controllers and Adapters E810 Ser…
- CVE-2024-21769Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user to potentially enableIntel(R) Ethernet Connection I219-LM install software
- CVE-2023-38655Improper buffer restrictions in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentiallIntel(R) AMT and Intel(R) Standard Manageability
- CVE-2023-34424Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of service via local aIntel(R) CSME
- CVE-2024-21844Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent aIntel(R) CSME
- CVE-2023-48361Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via locaIntel(R) CSME
- CVE-2023-40067Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable escalation of privilege viIntel(R) CSME
- CVE-2024-21857Uncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enaIntel(R) oneAPI Compiler software
- CVE-2024-21766Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to poteIntel(R) oneAPI Math Kernel Library software
- CVE-2024-22374Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of serviIntel(R) Xeon Processors
- CVE-2024-23495Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to poteIntel(R) Distribution for GDB software
- CVE-2024-24973Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentiIntel(R) Distribution for GDB software
- CVE-2024-23491Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentialIntel(R) Distribution for GDB software
- CVE-2024-25562Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potenIntel(R) Distribution for GDB software
- CVE-2023-35123Uncaught exception in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.14-0, bhs-0.27 may allow an authenticated usIntel(R) Server Platforms
- CVE-2024-23974Incorrect default permissions in some Intel(R) ISH software installers may allow an authenticated user to potentially enable escalation of pIntel(R) ISH software installers
- CVE-2024-25561Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user Intel(R) HID Event Filter software installers
- CVE-2024-24580Improper conditions check in some Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enabIntel(R) Data Center GPU Max Series 1100 and 1550 products
- CVE-2024-22378Incorrect default permissions in some Intel Unite(R) Client Extended Display Plugin software installers before version 1.1.352.157 may allowIntel Unite(R) Client Extended Display Plugin software inst…
- CVE-2024-24980Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially ena3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors
- CVE-2023-43747Incorrect default permissions for some Intel(R) Connectivity Performance Suite software installers before version 2.0 may allow an authenticIntel(R) Connectivity Performance Suite software installers
- CVE-2024-23909Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable Intel(R) FPGA SDK for OpenCL(TM) software technology
- CVE-2024-28046Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalatioIntel(R) GPA software
- CVE-2024-22376Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an auinstallation software for Intel(R) Ethernet Adapter Driver…
- CVE-2024-23908Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticateFlexlm License Daemons for Intel(R) FPGA software
- CVE-2024-26025Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authenticated user to potentially enableIntel(R) Advisor software
- CVE-2023-43489Improper access control for some Intel(R) CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denialIntel(R) CIP software
- CVE-2024-23907Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to poteIntel(R) High Level Synthesis Compiler software
- CVE-2024-21784Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially eIntel(R) IPP Cryptography software
- CVE-2024-28876Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enableIntel(R) MPI Library software
- CVE-2024-26027Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentialIntel(R) Simics Package Manager software
- CVE-2024-28172Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to poIntel(R) Trace Analyzer and Collector software
- CVE-2024-25939Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially ena3rd Generation Intel(R) Xeon(R) Scalable Processors
- CVE-2024-29015Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially Intel(R) VTune(TM) Profiler software
- CVE-2024-28953Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of privEMON software
- CVE-2024-24977Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated uIntel(R) License Manager for FLEXlm product software
- CVE-2024-22184Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before version 24.1 may allow an authenticated user Intel(R) Quartus(R) Prime Pro Edition Design Software
- CVE-2024-23489Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escIntel(R) VROC software
- CVE-2024-28887Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalatiIntel(R) IPP software
- CVE-2024-28050Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated userIntel(R) Arc(TM) & Iris(R) Xe Graphics software
- CVE-2024-27461Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potentially enable denial of sIntel(R) MAS
- CVE-2024-39419A user without ship permissions can ship the ordersAdobe Commerce · magento/project-community-edition +1
- CVE-2024-39418Adobe Commerce | Improper Authorization (CWE-285)Adobe Commerce · magento/project-community-edition +1
- CVE-2024-39413An unauthorized user can export the Invoiced Sales ReportAdobe Commerce · magento/project-community-edition +1
- CVE-2024-39408Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)Adobe Commerce · magento/community-edition
- CVE-2024-39417An unauthorized user can export the Shipping ReportAdobe Commerce · magento/project-community-edition +1
- CVE-2024-39410Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)Adobe Commerce · magento/community-edition
- CVE-2024-39407Adobe Commerce | Improper Authorization (CWE-285)Adobe Commerce · magento/project-community-edition +1
- CVE-2024-39409Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)Adobe Commerce · magento/community-edition
- CVE-2024-39411Adobe Commerce | Improper Authorization (CWE-285)Adobe Commerce · magento/project-community-edition +1
- CVE-2024-39416Unauthorized user can export Orders Sale ReportAdobe Commerce · magento/project-community-edition +1
- CVE-2024-39414Being able to import/export tax rates without proper privilegesAdobe Commerce · magento/project-community-edition +1
- CVE-2024-39412Adobe Commerce | Improper Authorization (CWE-285)Adobe Commerce · magento/community-edition
- CVE-2024-39406Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Commerce · magento/community-edition
- CVE-2024-39404A user without Shop Policy Parameters section privilege can alter the shop policy parameters sectionAdobe Commerce · magento/project-community-edition +1
- CVE-2024-39415An unauthorized user can export the Tax Sales ReportAdobe Commerce · magento/project-community-edition +1
- CVE-2024-39405Adobe Commerce | Improper Authorization (CWE-285)Adobe Commerce · magento/project-community-edition +1
- CVE-2024-6532Sheet to Table Live Sync for Google Sheet <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via STWT_Sheet_Table Shortcodecodersaiful Sheet to Table Live Sync for Google Sheet
- CVE-2024-38483Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component.Dell Client Platform BIOS
- CVE-2024-41862Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability II, when parsing PSD fileAdobe Substance3D - Sampler
- CVE-2024-41861Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD fileAdobe Substance3D - Sampler
- CVE-2024-41860Adobe Substance 3D Sampler Memory Corruption Vulnerability I, when parsing PSD fileAdobe Substance3D - Sampler
- CVE-2024-41863Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability III, when parsing DNG fileAdobe Substance3D - Sampler
- CVE-2024-7588Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Blockpickplugins Post Grid
- CVE-2024-7754SourceCodester Clinics Patient Management System check_medicine_name.php sql injectionSourceCodester Clinics Patient Management System
- CVE-2024-7753SourceCodester Clinics Patient Management System user_images direct requestSourceCodester Clinics Patient Management System