# CVEs published 2024-11-22

387 CVEs were published on November 22, 2024: 21 critical, 258 high. Days are UTC.

- [CVE-2024-0122](https://cve.now/CVE-2024-0122.md): NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker may cause an unauthorized action. (CVSS 7.6, DLS component of NVIDIA License System)
- [CVE-2024-0138](https://cve.now/CVE-2024-0138.md): NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component. (CVSS 9.8, NVIDIA Base Command Manager)
- [CVE-2024-50054](https://cve.now/CVE-2024-50054.md): mySCADA myPRO Path Traversal (CVSS 7.5, mySCADA myPRO Manager · mySCADA myPRO Runtime)
- [CVE-2024-47138](https://cve.now/CVE-2024-47138.md): mySCADA myPRO Missing Authentication for Critical Function (CVSS 9.8, mySCADA myPRO Manager · mySCADA myPRO Runtime)
- [CVE-2024-45369](https://cve.now/CVE-2024-45369.md): mySCADA myPRO Improper Authentication (CVSS 8.1, mySCADA myPRO Manager · mySCADA myPRO Runtime)
- [CVE-2024-52034](https://cve.now/CVE-2024-52034.md): mySCADA myPRO OS Command Injection (CVSS 10.0, mySCADA myPRO Manager · mySCADA myPRO Runtime)
- [CVE-2024-47407](https://cve.now/CVE-2024-47407.md): mySCADA myPRO OS Command Injection (CVSS 10.0, mySCADA myPRO Manager · mySCADA myPRO Runtime)
- [CVE-2024-11630](https://cve.now/CVE-2024-11630.md): E-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials (CVSS 6.9, E-Lins H685 · E-Lins H685f +7)
- [CVE-2024-9114](https://cve.now/CVE-2024-9114.md): FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, FastStone Image Viewer)
- [CVE-2024-9113](https://cve.now/CVE-2024-9113.md): FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, FastStone Image Viewer)
- [CVE-2024-9112](https://cve.now/CVE-2024-9112.md): FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, FastStone Image Viewer)
- [CVE-2024-8360](https://cve.now/CVE-2024-8360.md): Visteon Infotainment REFLASH\_DDU\_ExtractFile Command Injection Remote Code Execution Vulnerability (CVSS 6.8, Visteon Infotainment)
- [CVE-2024-8359](https://cve.now/CVE-2024-8359.md): Visteon Infotainment REFLASH\_DDU\_FindFile Command Injection Remote Code Execution Vulnerability (CVSS 6.8, Visteon Infotainment)
- [CVE-2024-8358](https://cve.now/CVE-2024-8358.md): Visteon Infotainment UPDATES\_ExtractFile Command Injection Remote Code Execution Vulnerability (CVSS 6.8, Visteon Infotainment)
- [CVE-2024-8357](https://cve.now/CVE-2024-8357.md): Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability (CVSS 7.8, Visteon Infotainment)
- [CVE-2024-8356](https://cve.now/CVE-2024-8356.md): Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability (CVSS 8.8, Visteon Infotainment)
- [CVE-2024-8355](https://cve.now/CVE-2024-8355.md): Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability (CVSS 6.8, Visteon Infotainment)
- [CVE-2024-7565](https://cve.now/CVE-2024-7565.md): SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability (CVSS 7.8, SMARTBEAR SoapUI)
- [CVE-2024-7511](https://cve.now/CVE-2024-7511.md): Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Trimble SketchUp Pro)
- [CVE-2024-7510](https://cve.now/CVE-2024-7510.md): Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp)
- [CVE-2024-7509](https://cve.now/CVE-2024-7509.md): Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp)
- [CVE-2024-7508](https://cve.now/CVE-2024-7508.md): Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-7392](https://cve.now/CVE-2024-7392.md): ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability (CVSS 4.3, ChargePoint Home Flex)
- [CVE-2024-7391](https://cve.now/CVE-2024-7391.md): ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability (CVSS 2.6, ChargePoint Home Flex)
- [CVE-2024-7352](https://cve.now/CVE-2024-7352.md): PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-7253](https://cve.now/CVE-2024-7253.md): NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.8, NoMachine)
- [CVE-2024-7245](https://cve.now/CVE-2024-7245.md): Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 7.0, Panda Security Dome)
- [CVE-2024-6871](https://cve.now/CVE-2024-6871.md): G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 7.0, G DATA Total Security)
- [CVE-2024-11394](https://cve.now/CVE-2024-11394.md): Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.8, Hugging Face Transformers · transformers)
- [CVE-2024-11393](https://cve.now/CVE-2024-11393.md): Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.8, Hugging Face Transformers · transformers)
- [CVE-2024-11392](https://cve.now/CVE-2024-11392.md): Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.5, Hugging Face Transformers · transformers)
- [CVE-2024-9248](https://cve.now/CVE-2024-9248.md): Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Foxit PDF Reader)
- [CVE-2024-9250](https://cve.now/CVE-2024-9250.md): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit PDF Reader)
- [CVE-2024-9252](https://cve.now/CVE-2024-9252.md): Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability (CVSS 3.3, Foxit PDF Reader)
- [CVE-2024-9253](https://cve.now/CVE-2024-9253.md): Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Foxit PDF Reader)
- [CVE-2024-9251](https://cve.now/CVE-2024-9251.md): Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability (CVSS 3.3, Foxit PDF Reader)
- [CVE-2024-9254](https://cve.now/CVE-2024-9254.md): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit PDF Reader)
- [CVE-2024-9255](https://cve.now/CVE-2024-9255.md): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit PDF Reader)
- [CVE-2024-9256](https://cve.now/CVE-2024-9256.md): Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Foxit PDF Reader)
- [CVE-2024-9243](https://cve.now/CVE-2024-9243.md): Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit PDF Reader)
- [CVE-2024-9245](https://cve.now/CVE-2024-9245.md): Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 7.8, Foxit PDF Reader)
- [CVE-2024-9244](https://cve.now/CVE-2024-9244.md): Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 7.8, Foxit PDF Reader)
- [CVE-2024-9246](https://cve.now/CVE-2024-9246.md): Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Foxit PDF Reader)
- [CVE-2024-9247](https://cve.now/CVE-2024-9247.md): Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Foxit PDF Reader)
- [CVE-2024-9249](https://cve.now/CVE-2024-9249.md): Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Foxit PDF Reader)
- [CVE-2024-6822](https://cve.now/CVE-2024-6822.md): IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-6821](https://cve.now/CVE-2024-6821.md): IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-6820](https://cve.now/CVE-2024-6820.md): IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-6819](https://cve.now/CVE-2024-6819.md): IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-6818](https://cve.now/CVE-2024-6818.md): IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-7242](https://cve.now/CVE-2024-7242.md): Panda Security Dome Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Panda Security Dome)
- [CVE-2024-7241](https://cve.now/CVE-2024-7241.md): Panda Security Dome Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Panda Security Dome)
- [CVE-2024-7244](https://cve.now/CVE-2024-7244.md): Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability (CVSS 7.8, Panda Security Dome)
- [CVE-2024-7243](https://cve.now/CVE-2024-7243.md): Panda Security Dome Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Panda Security Dome)
- [CVE-2024-7240](https://cve.now/CVE-2024-7240.md): F-Secure Total Link Following Local Privilege Escalation Vulnerability (CVSS 7.3, F-Secure Total)
- [CVE-2024-7238](https://cve.now/CVE-2024-7238.md): VIPRE Advanced Security SBAMSvc Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, VIPRE Advanced Security)
- [CVE-2024-7239](https://cve.now/CVE-2024-7239.md): VIPRE Advanced Security Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, VIPRE Advanced Security)
- [CVE-2024-7236](https://cve.now/CVE-2024-7236.md): AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability (CVSS 5.3, AVG AntiVirus Free)
- [CVE-2024-7234](https://cve.now/CVE-2024-7234.md): AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, AVG AntiVirus Free)
- [CVE-2024-7237](https://cve.now/CVE-2024-7237.md): AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, AVG AntiVirus Free)
- [CVE-2024-7235](https://cve.now/CVE-2024-7235.md): AVG AntiVirus Free Link Following Denial-of-Service Vulnerability (CVSS 6.1, AVG AntiVirus Free)
- [CVE-2024-7233](https://cve.now/CVE-2024-7233.md): Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Avast Free Antivirus)
- [CVE-2024-7232](https://cve.now/CVE-2024-7232.md): Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Avast Free Antivirus)
- [CVE-2024-7227](https://cve.now/CVE-2024-7227.md): Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Avast Free Antivirus)
- [CVE-2024-7229](https://cve.now/CVE-2024-7229.md): Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Avast Cleanup Premium)
- [CVE-2024-7231](https://cve.now/CVE-2024-7231.md): Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Avast Cleanup Premium)
- [CVE-2024-7230](https://cve.now/CVE-2024-7230.md): Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Avast Cleanup Premium)
- [CVE-2024-7228](https://cve.now/CVE-2024-7228.md): Avast Free Antivirus Link Following Denial-of-Service Vulnerability (CVSS 6.1, Avast Free Antivirus)
- [CVE-2024-8025](https://cve.now/CVE-2024-8025.md): Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.0, Nikon NEF Codec)
- [CVE-2024-9261](https://cve.now/CVE-2024-9261.md): IrfanView SID File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-9260](https://cve.now/CVE-2024-9260.md): IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-9259](https://cve.now/CVE-2024-9259.md): IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-9767](https://cve.now/CVE-2024-9767.md): IrfanView SID File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-9258](https://cve.now/CVE-2024-9258.md): IrfanView SID File Parsing Uninitialized Pointer Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-8849](https://cve.now/CVE-2024-8849.md): PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8848](https://cve.now/CVE-2024-8848.md): PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8847](https://cve.now/CVE-2024-8847.md): PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8846](https://cve.now/CVE-2024-8846.md): PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8845](https://cve.now/CVE-2024-8845.md): PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8844](https://cve.now/CVE-2024-8844.md): PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8843](https://cve.now/CVE-2024-8843.md): PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8842](https://cve.now/CVE-2024-8842.md): PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8841](https://cve.now/CVE-2024-8841.md): PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8840](https://cve.now/CVE-2024-8840.md): PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8839](https://cve.now/CVE-2024-8839.md): PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8838](https://cve.now/CVE-2024-8838.md): PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8837](https://cve.now/CVE-2024-8837.md): PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8836](https://cve.now/CVE-2024-8836.md): PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8835](https://cve.now/CVE-2024-8835.md): PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8834](https://cve.now/CVE-2024-8834.md): PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8833](https://cve.now/CVE-2024-8833.md): PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8832](https://cve.now/CVE-2024-8832.md): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8831](https://cve.now/CVE-2024-8831.md): PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8830](https://cve.now/CVE-2024-8830.md): PDF-XChange Editor XPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8829](https://cve.now/CVE-2024-8829.md): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8828](https://cve.now/CVE-2024-8828.md): PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8827](https://cve.now/CVE-2024-8827.md): PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8826](https://cve.now/CVE-2024-8826.md): PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8825](https://cve.now/CVE-2024-8825.md): PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8824](https://cve.now/CVE-2024-8824.md): PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8823](https://cve.now/CVE-2024-8823.md): PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8822](https://cve.now/CVE-2024-8822.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8821](https://cve.now/CVE-2024-8821.md): PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8820](https://cve.now/CVE-2024-8820.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8819](https://cve.now/CVE-2024-8819.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8818](https://cve.now/CVE-2024-8818.md): PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8817](https://cve.now/CVE-2024-8817.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8816](https://cve.now/CVE-2024-8816.md): PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2024-8815](https://cve.now/CVE-2024-8815.md): PDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8814](https://cve.now/CVE-2024-8814.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8813](https://cve.now/CVE-2024-8813.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8812](https://cve.now/CVE-2024-8812.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2024-8811](https://cve.now/CVE-2024-8811.md): WinZip Mark-of-the-Web Bypass Vulnerability (CVSS 7.8, WinZip Computing WinZip)
- [CVE-2024-8809](https://cve.now/CVE-2024-8809.md): Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability (CVSS 8.8, Cohesive Networks VNS3)
- [CVE-2024-8808](https://cve.now/CVE-2024-8808.md): Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability (CVSS 8.8, Cohesive Networks VNS3)
- [CVE-2024-8807](https://cve.now/CVE-2024-8807.md): Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability (CVSS 9.8, Cohesive Networks VNS3)
- [CVE-2024-8806](https://cve.now/CVE-2024-8806.md): Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability (CVSS 9.8, Cohesive Networks VNS3)
- [CVE-2024-8805](https://cve.now/CVE-2024-8805.md): BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability (CVSS 8.8, BlueZ)
- [CVE-2024-9257](https://cve.now/CVE-2024-9257.md): Logsign Unified SecOps Platform delete\_gsuite\_key\_file Input Validation Arbitrary File Deletion Vulnerability (CVSS 4.3, Logsign Unified SecOps Platform)
- [CVE-2024-9665](https://cve.now/CVE-2024-9665.md): Zimbra GraphQL Cross-Site Request Forgery Information Disclosure Vulnerability (CVSS 6.5, Zimbra)
- [CVE-2024-9766](https://cve.now/CVE-2024-9766.md): Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Wacom Center)
- [CVE-2024-9755](https://cve.now/CVE-2024-9755.md): Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9757](https://cve.now/CVE-2024-9757.md): Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9761](https://cve.now/CVE-2024-9761.md): Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9735](https://cve.now/CVE-2024-9735.md): Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9744](https://cve.now/CVE-2024-9744.md): Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9751](https://cve.now/CVE-2024-9751.md): Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9764](https://cve.now/CVE-2024-9764.md): Tungsten Automation Power PDF PDF File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9758](https://cve.now/CVE-2024-9758.md): Tungsten Automation Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9753](https://cve.now/CVE-2024-9753.md): Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9763](https://cve.now/CVE-2024-9763.md): Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9762](https://cve.now/CVE-2024-9762.md): Tungsten Automation Power PDF OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9760](https://cve.now/CVE-2024-9760.md): Tungsten Automation Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9759](https://cve.now/CVE-2024-9759.md): Tungsten Automation Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9754](https://cve.now/CVE-2024-9754.md): Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9752](https://cve.now/CVE-2024-9752.md): Tungsten Automation Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9734](https://cve.now/CVE-2024-9734.md): Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9733](https://cve.now/CVE-2024-9733.md): Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9736](https://cve.now/CVE-2024-9736.md): Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9737](https://cve.now/CVE-2024-9737.md): Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9739](https://cve.now/CVE-2024-9739.md): Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9750](https://cve.now/CVE-2024-9750.md): Tungsten Automation Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9745](https://cve.now/CVE-2024-9745.md): Tungsten Automation Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9741](https://cve.now/CVE-2024-9741.md): Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9746](https://cve.now/CVE-2024-9746.md): Tungsten Automation Power PDF TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9747](https://cve.now/CVE-2024-9747.md): Tungsten Automation Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9740](https://cve.now/CVE-2024-9740.md): Tungsten Automation Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9742](https://cve.now/CVE-2024-9742.md): Tungsten Automation Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9738](https://cve.now/CVE-2024-9738.md): Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9749](https://cve.now/CVE-2024-9749.md): Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Tungsten Automation Power PDF)
- [CVE-2024-9748](https://cve.now/CVE-2024-9748.md): Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9743](https://cve.now/CVE-2024-9743.md): Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-9732](https://cve.now/CVE-2024-9732.md): Tungsten Automation Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Tungsten Automation Power PDF)
- [CVE-2024-11619](https://cve.now/CVE-2024-11619.md): macrozheng mall JWT Token default key (CVSS 2.3, macrozheng mall)
- [CVE-2024-9731](https://cve.now/CVE-2024-9731.md): Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9730](https://cve.now/CVE-2024-9730.md): Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9729](https://cve.now/CVE-2024-9729.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9728](https://cve.now/CVE-2024-9728.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9727](https://cve.now/CVE-2024-9727.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9726](https://cve.now/CVE-2024-9726.md): Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9725](https://cve.now/CVE-2024-9725.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9724](https://cve.now/CVE-2024-9724.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9723](https://cve.now/CVE-2024-9723.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9722](https://cve.now/CVE-2024-9722.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9721](https://cve.now/CVE-2024-9721.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9720](https://cve.now/CVE-2024-9720.md): Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9719](https://cve.now/CVE-2024-9719.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9718](https://cve.now/CVE-2024-9718.md): Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9717](https://cve.now/CVE-2024-9717.md): Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9716](https://cve.now/CVE-2024-9716.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9715](https://cve.now/CVE-2024-9715.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9714](https://cve.now/CVE-2024-9714.md): Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Viewer)
- [CVE-2024-9713](https://cve.now/CVE-2024-9713.md): Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp Pro)
- [CVE-2024-9712](https://cve.now/CVE-2024-9712.md): Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Trimble SketchUp)
- [CVE-2024-11507](https://cve.now/CVE-2024-11507.md): IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11508](https://cve.now/CVE-2024-11508.md): IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11509](https://cve.now/CVE-2024-11509.md): IrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11513](https://cve.now/CVE-2024-11513.md): IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11516](https://cve.now/CVE-2024-11516.md): IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11514](https://cve.now/CVE-2024-11514.md): IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11515](https://cve.now/CVE-2024-11515.md): IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11517](https://cve.now/CVE-2024-11517.md): IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11518](https://cve.now/CVE-2024-11518.md): IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11519](https://cve.now/CVE-2024-11519.md): IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11506](https://cve.now/CVE-2024-11506.md): IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11524](https://cve.now/CVE-2024-11524.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11523](https://cve.now/CVE-2024-11523.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11525](https://cve.now/CVE-2024-11525.md): IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11522](https://cve.now/CVE-2024-11522.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11528](https://cve.now/CVE-2024-11528.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11538](https://cve.now/CVE-2024-11538.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11532](https://cve.now/CVE-2024-11532.md): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11533](https://cve.now/CVE-2024-11533.md): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11534](https://cve.now/CVE-2024-11534.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11535](https://cve.now/CVE-2024-11535.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11536](https://cve.now/CVE-2024-11536.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11537](https://cve.now/CVE-2024-11537.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11554](https://cve.now/CVE-2024-11554.md): IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11520](https://cve.now/CVE-2024-11520.md): IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11521](https://cve.now/CVE-2024-11521.md): IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11560](https://cve.now/CVE-2024-11560.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11561](https://cve.now/CVE-2024-11561.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11563](https://cve.now/CVE-2024-11563.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11567](https://cve.now/CVE-2024-11567.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11569](https://cve.now/CVE-2024-11569.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11574](https://cve.now/CVE-2024-11574.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11562](https://cve.now/CVE-2024-11562.md): IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11570](https://cve.now/CVE-2024-11570.md): IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11572](https://cve.now/CVE-2024-11572.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11575](https://cve.now/CVE-2024-11575.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11564](https://cve.now/CVE-2024-11564.md): IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11565](https://cve.now/CVE-2024-11565.md): IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11571](https://cve.now/CVE-2024-11571.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11573](https://cve.now/CVE-2024-11573.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11566](https://cve.now/CVE-2024-11566.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11568](https://cve.now/CVE-2024-11568.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11556](https://cve.now/CVE-2024-11556.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11557](https://cve.now/CVE-2024-11557.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11558](https://cve.now/CVE-2024-11558.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11555](https://cve.now/CVE-2024-11555.md): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11559](https://cve.now/CVE-2024-11559.md): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11510](https://cve.now/CVE-2024-11510.md): IrfanView WBZ plugin WB1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11511](https://cve.now/CVE-2024-11511.md): IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11512](https://cve.now/CVE-2024-11512.md): IrfanView WBZ Plugin WB1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11553](https://cve.now/CVE-2024-11553.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11539](https://cve.now/CVE-2024-11539.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11541](https://cve.now/CVE-2024-11541.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11540](https://cve.now/CVE-2024-11540.md): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11542](https://cve.now/CVE-2024-11542.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11551](https://cve.now/CVE-2024-11551.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11543](https://cve.now/CVE-2024-11543.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11549](https://cve.now/CVE-2024-11549.md): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11552](https://cve.now/CVE-2024-11552.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11548](https://cve.now/CVE-2024-11548.md): IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11547](https://cve.now/CVE-2024-11547.md): IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11546](https://cve.now/CVE-2024-11546.md): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11545](https://cve.now/CVE-2024-11545.md): IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11544](https://cve.now/CVE-2024-11544.md): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11550](https://cve.now/CVE-2024-11550.md): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11526](https://cve.now/CVE-2024-11526.md): IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11527](https://cve.now/CVE-2024-11527.md): IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11529](https://cve.now/CVE-2024-11529.md): IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11530](https://cve.now/CVE-2024-11530.md): IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11531](https://cve.now/CVE-2024-11531.md): IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-11581](https://cve.now/CVE-2024-11581.md): Luxion KeyShot JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Luxion KeyShot)
- [CVE-2024-11580](https://cve.now/CVE-2024-11580.md): Luxion KeyShot ABC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Luxion KeyShot)
- [CVE-2024-11579](https://cve.now/CVE-2024-11579.md): Luxion KeyShot OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Luxion KeyShot)
- [CVE-2024-11578](https://cve.now/CVE-2024-11578.md): Luxion KeyShot 3DS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Luxion KeyShot)
- [CVE-2024-11577](https://cve.now/CVE-2024-11577.md): Luxion KeyShot SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Luxion KeyShot)
- [CVE-2024-11576](https://cve.now/CVE-2024-11576.md): Luxion KeyShot 3DS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Luxion KeyShot)
- [CVE-2024-9710](https://cve.now/CVE-2024-9710.md): PostHog database\_schema Server-Side Request Forgery Information Disclosure Vulnerability (CVSS 7.1, PostHog)
- [CVE-2024-11477](https://cve.now/CVE-2024-11477.md): 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability (CVSS 7.8, 7-Zip)
- [CVE-2024-11612](https://cve.now/CVE-2024-11612.md): 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability (CVSS 6.5, 7-Zip)
- [CVE-2024-6817](https://cve.now/CVE-2024-6817.md): IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-6816](https://cve.now/CVE-2024-6816.md): IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-6815](https://cve.now/CVE-2024-6815.md): IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-6260](https://cve.now/CVE-2024-6260.md): Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability (CVSS 7.0, Malwarebytes Anti-Malware)
- [CVE-2024-6249](https://cve.now/CVE-2024-6249.md): Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Wyze Cam)
- [CVE-2024-6248](https://cve.now/CVE-2024-6248.md): Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability (CVSS 7.5, Wyze Cam)
- [CVE-2024-6247](https://cve.now/CVE-2024-6247.md): Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability (CVSS 6.8, Wyze Cam)
- [CVE-2024-6246](https://cve.now/CVE-2024-6246.md): Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability (CVSS 9.6, Wyze Cam)
- [CVE-2024-6233](https://cve.now/CVE-2024-6233.md): Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, Check Point ZoneAlarm Extreme Security)
- [CVE-2024-5877](https://cve.now/CVE-2024-5877.md): IrfanView PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-5876](https://cve.now/CVE-2024-5876.md): IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-5875](https://cve.now/CVE-2024-5875.md): IrfanView SHP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-5874](https://cve.now/CVE-2024-5874.md): IrfanView PNT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, IrfanView)
- [CVE-2024-5722](https://cve.now/CVE-2024-5722.md): Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability (CVSS 8.8, Logsign Unified SecOps Platform)
- [CVE-2024-5721](https://cve.now/CVE-2024-5721.md): Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability (CVSS 8.1, Logsign Unified SecOps Platform)
- [CVE-2024-5720](https://cve.now/CVE-2024-5720.md): Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability (CVSS 8.8, Logsign Unified SecOps Platform)
- [CVE-2024-5719](https://cve.now/CVE-2024-5719.md): Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability (CVSS 8.8, Logsign Unified SecOps Platform)
- [CVE-2024-5718](https://cve.now/CVE-2024-5718.md): Logsign Unified SecOps Platform Missing Authentication Remote Code Execution Vulnerability (CVSS 8.1, Logsign Unified SecOps Platform)
- [CVE-2024-5717](https://cve.now/CVE-2024-5717.md): Logsign Unified SecOps Platform Command Injection Remote Code Execution Vulnerability (CVSS 8.8, Logsign Unified SecOps Platform)
- [CVE-2024-5716](https://cve.now/CVE-2024-5716.md): Logsign Unified SecOps Platform Authentication Bypass Vulnerability (CVSS 8.6, Logsign Unified SecOps Platform)
- [CVE-2024-5581](https://cve.now/CVE-2024-5581.md): Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability (CVSS 7.2, Allegra)
- [CVE-2024-5580](https://cve.now/CVE-2024-5580.md): Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.2, Allegra)
- [CVE-2024-5579](https://cve.now/CVE-2024-5579.md): Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.2, Allegra)
- [CVE-2024-5513](https://cve.now/CVE-2024-5513.md): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Kofax Power PDF)
- [CVE-2024-5512](https://cve.now/CVE-2024-5512.md): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Kofax Power PDF)
- [CVE-2024-5511](https://cve.now/CVE-2024-5511.md): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Kofax Power PDF)
- [CVE-2024-5510](https://cve.now/CVE-2024-5510.md): Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Kofax Power PDF)
- [CVE-2024-30377](https://cve.now/CVE-2024-30377.md): G DATA Total Security Scan Server Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, G DATA Total Security)
- [CVE-2024-30376](https://cve.now/CVE-2024-30376.md): Famatech Advanced IP Scanner Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.3, Famatech Advanced IP Scanner)
- [CVE-2024-30372](https://cve.now/CVE-2024-30372.md): Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability (CVSS 8.8, Allegra)
- [CVE-2024-1868](https://cve.now/CVE-2024-1868.md): G DATA Total Security Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, G DATA Total Security)
- [CVE-2024-1867](https://cve.now/CVE-2024-1867.md): G DATA Total Security Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, G DATA Total Security)
- [CVE-2023-52335](https://cve.now/CVE-2023-52335.md): Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability (CVSS 7.5, Advantech iView)
- [CVE-2023-52334](https://cve.now/CVE-2023-52334.md): Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability (CVSS 7.5, Allegra)
- [CVE-2023-52333](https://cve.now/CVE-2023-52333.md): Allegra saveFile Directory Traversal Remote Code Execution Vulnerability (CVSS 9.8, Allegra)
- [CVE-2023-52332](https://cve.now/CVE-2023-52332.md): Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability (CVSS 7.5, Allegra)
- [CVE-2023-51648](https://cve.now/CVE-2023-51648.md): Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability (CVSS 7.5, Allegra)
- [CVE-2023-51647](https://cve.now/CVE-2023-51647.md): Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability (CVSS 7.2, Allegra)
- [CVE-2023-51646](https://cve.now/CVE-2023-51646.md): Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability (CVSS 7.2, Allegra)
- [CVE-2023-51645](https://cve.now/CVE-2023-51645.md): Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability (CVSS 7.2, Allegra)
- [CVE-2023-51644](https://cve.now/CVE-2023-51644.md): Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability (CVSS 9.8, Allegra)
- [CVE-2023-51643](https://cve.now/CVE-2023-51643.md): Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability (CVSS 7.2, Allegra)
- [CVE-2023-51642](https://cve.now/CVE-2023-51642.md): Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 9.8, Allegra)
- [CVE-2023-51641](https://cve.now/CVE-2023-51641.md): Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability (CVSS 9.8, Allegra)
- [CVE-2023-51640](https://cve.now/CVE-2023-51640.md): Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability (CVSS 7.2, Allegra)
- [CVE-2023-51639](https://cve.now/CVE-2023-51639.md): Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability (CVSS 9.8, Allegra)
- [CVE-2023-51638](https://cve.now/CVE-2023-51638.md): Allegra Hard-coded Credentials Authentication Bypass Vulnerability (CVSS 9.8, Allegra)
- [CVE-2023-51635](https://cve.now/CVE-2023-51635.md): NETGEAR RAX30 fing\_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, NETGEAR RAX30)
- [CVE-2023-51634](https://cve.now/CVE-2023-51634.md): NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability (CVSS 7.5, NETGEAR RAX30)
- [CVE-2023-39470](https://cve.now/CVE-2023-39470.md): PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability (CVSS 7.2, PaperCut NG)
- [CVE-2024-53253](https://cve.now/CVE-2024-53253.md): Sentry's improper error handling leaks Application Integration Client Secret (CVSS 5.3, getsentry sentry · sentry)
- [CVE-2024-52998](https://cve.now/CVE-2024-52998.md): Substance3D - Stager | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Stager)
- [CVE-2024-11618](https://cve.now/CVE-2024-11618.md): IPC Unigy Management System HTTP Request server-side request forgery (CVSS 6.9, IPC Unigy Management System)
- [CVE-2024-10220](https://cve.now/CVE-2024-10220.md): Arbitrary command execution through gitRepo volume (CVSS 8.1, Kubernetes kubelet · k8s.io/kubernetes)
- [CVE-2024-52814](https://cve.now/CVE-2024-52814.md): Helm Lacks Granularity in Workflow Role (CVSS 2.8, argoproj argo-helm)
- [CVE-2024-52804](https://cve.now/CVE-2024-52804.md): Tornado has HTTP cookie parsing DoS vulnerability (CVSS 7.5, tornadoweb tornado · tornado)
- [CVE-2024-52802](https://cve.now/CVE-2024-52802.md): RIOT-OS missing dhcpv6\_opt\_t minimum header length check (CVSS 7.5, RIOT-OS RIOT)
- [CVE-2024-52793](https://cve.now/CVE-2024-52793.md): XSS vulnerability in serveDir API of @std/http/file-server on POSIX systems (CVSS 5.1, denoland std)
- [CVE-2024-10863](https://cve.now/CVE-2024-10863.md): Client-side audit exclusion vulnerability (CVSS 5.1, OpenText Secure Content Manager)
- [CVE-2021-38116](https://cve.now/CVE-2021-38116.md): Possible Command injection Vulnerability in OpenText iManager (CVSS 8.8, OpenText iManager)
- [CVE-2021-38117](https://cve.now/CVE-2021-38117.md): Possible Remote Code Execution Vulnerability OpenText iManager (CVSS 8.8, OpenText iManager)
- [CVE-2021-38118](https://cve.now/CVE-2021-38118.md): Possible Local Privilege Escalation Vulnerability in OpenText iManager (CVSS 5.5, OpenText iManager)
- [CVE-2021-38119](https://cve.now/CVE-2021-38119.md): Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager (CVSS 6.1, OpenText iManager)
- [CVE-2021-38134](https://cve.now/CVE-2021-38134.md): Possible Reflected and Stored XSS in OpenText iManager (CVSS 6.1, OpenText iManager)
- [CVE-2021-38135](https://cve.now/CVE-2021-38135.md): Possible External service interaction Vulnerability in OpenText iManager (CVSS 8.6, OpenText iManager)
- [CVE-2022-26324](https://cve.now/CVE-2022-26324.md): Possible XSS in iManager URL for access Component (CVSS 7.6, OpenText iManager)
- [CVE-2023-24466](https://cve.now/CVE-2023-24466.md): Possible XML External Entity Injection in OpenText iManager (CVSS 7.5, OpenText iManager)
- [CVE-2023-24467](https://cve.now/CVE-2023-24467.md): Possible Command Injection in OpenText iManager (CVSS 8.8, OpenText iManager)
- [CVE-2024-32767](https://cve.now/CVE-2024-32767.md): Photo Station (CVSS 6.3, QNAP Systems Photo Station)
- [CVE-2024-32768](https://cve.now/CVE-2024-32768.md): Photo Station (CVSS 6.3, QNAP Systems Photo Station)
- [CVE-2024-32769](https://cve.now/CVE-2024-32769.md): Photo Station (CVSS 6.3, QNAP Systems Photo Station)
- [CVE-2024-32770](https://cve.now/CVE-2024-32770.md): Photo Station (CVSS 6.3, QNAP Systems Photo Station)
- [CVE-2024-37041](https://cve.now/CVE-2024-37041.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-37042](https://cve.now/CVE-2024-37042.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-37043](https://cve.now/CVE-2024-37043.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-37044](https://cve.now/CVE-2024-37044.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-37045](https://cve.now/CVE-2024-37045.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-37046](https://cve.now/CVE-2024-37046.md): QTS, QuTS hero (CVSS 2.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-37047](https://cve.now/CVE-2024-37047.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-37048](https://cve.now/CVE-2024-37048.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-37049](https://cve.now/CVE-2024-37049.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-37050](https://cve.now/CVE-2024-37050.md): QTS, QuTS hero (CVSS 5.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-38643](https://cve.now/CVE-2024-38643.md): Notes Station 3 (CVSS 9.3, QNAP Systems Notes Station)
- [CVE-2024-38644](https://cve.now/CVE-2024-38644.md): Notes Station 3 (CVSS 8.7, QNAP Systems Notes Station)
- [CVE-2024-38645](https://cve.now/CVE-2024-38645.md): Notes Station 3 (CVSS 9.4, QNAP Systems Notes Station)
- [CVE-2024-38646](https://cve.now/CVE-2024-38646.md): Notes Station 3 (CVSS 8.4, QNAP Systems Notes Station)
- [CVE-2024-38647](https://cve.now/CVE-2024-38647.md): QNAP AI Core (CVSS 7.9, QNAP Systems QNAP AI Core)
- [CVE-2024-48860](https://cve.now/CVE-2024-48860.md): QHora (CVSS 9.5, QNAP Systems QuRouter)
- [CVE-2024-48861](https://cve.now/CVE-2024-48861.md): QHora (CVSS 7.3, QNAP Systems QuRouter)
- [CVE-2024-48862](https://cve.now/CVE-2024-48862.md): QuLog Center (CVSS 8.7, QNAP Systems QuLog Center)
- [CVE-2024-50395](https://cve.now/CVE-2024-50395.md): Media Streaming add-on (CVSS 6.9, QNAP Systems Media Streaming add-on)
- [CVE-2024-50396](https://cve.now/CVE-2024-50396.md): QTS, QuTS hero (CVSS 7.7, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-50397](https://cve.now/CVE-2024-50397.md): QTS, QuTS hero (CVSS 7.7, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-50398](https://cve.now/CVE-2024-50398.md): QTS, QuTS hero (CVSS 2.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-50399](https://cve.now/CVE-2024-50399.md): QTS, QuTS hero (CVSS 2.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-50400](https://cve.now/CVE-2024-50400.md): QTS, QuTS hero (CVSS 2.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-50401](https://cve.now/CVE-2024-50401.md): QTS, QuTS hero (CVSS 2.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2024-49054](https://cve.now/CVE-2024-49054.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2024-45719](https://cve.now/CVE-2024-45719.md): Apache Answer: Predictable Authorization Token Using UUIDv1 (CVSS 2.6, Apache Software Foundation Apache Answer · github.com/apach…)
- [CVE-2024-41779](https://cve.now/CVE-2024-41779.md): IBM Engineering Systems Design Rhapsody - Model Manager (CVSS 9.8, IBM Engineering Systems Design Rhapsody - Model Manager)
- [CVE-2024-41781](https://cve.now/CVE-2024-41781.md): IBM PowerVM Hypervisor information disclosure (CVSS 5.1, IBM PowerVM Hypervisor)
- [CVE-2024-51766](https://cve.now/CVE-2024-51766.md): HPE NonStop DISK UTIL, Local Denial of Service vulnerability (CVSS 6.5, Hewlett Packard Enterprise HPE NonStop DISK UTIL)
- [CVE-2021-30299](https://cve.now/CVE-2021-30299.md): Improper Input Validation in Audio (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2017-9711](https://cve.now/CVE-2017-9711.md): Permissions, Privileges, and Access Controls in Data (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2024-7882](https://cve.now/CVE-2024-7882.md): SQLi in Special Minds' e-Commerce (CVSS 6.5, Special Minds Design and Software e-Commerce)
- [CVE-2024-7837](https://cve.now/CVE-2024-7837.md): SQLi in Firmanet Software's ERP (CVSS 8.2, Firmanet Software ERP)
- [CVE-2024-8929](https://cve.now/CVE-2024-8929.md): Leak partial content of the heap through heap buffer over-read in mysqlnd (CVSS 5.8, PHP Group PHP)
- [CVE-2024-8932](https://cve.now/CVE-2024-8932.md): OOB access in ldap\_escape (CVSS 9.8, PHP Group PHP)
- [CVE-2024-9422](https://cve.now/CVE-2024-9422.md): GEO My WordPress \< 4.5 - Admin+ Arbitrary File Upload (CVSS 6.6, GEO my WP · gmw-premium-settings)
- [CVE-2024-10666](https://cve.now/CVE-2024-10666.md): Easy Twitter Feed – Twitter feeds plugin for WP \<= 1.2.6 - Authenticated (Contributor+) Post Exposure (CVSS 4.3, bplugins Feeds for Twitter – Embed Social Media Posts with…)
- [CVE-2024-8735](https://cve.now/CVE-2024-8735.md): MailMunch – Grow your Email List \<= 3.1.8 - Reflected Cross-Site Scripting (CVSS 6.1, MailMunch – Grow your Email List)
- [CVE-2024-11225](https://cve.now/CVE-2024-11225.md): Premium Packages – Sell Digital Products Securely \<= 5.9.3 - Reflected Cross-Site Scripting via add\_query\_arg (CVSS 6.1, codename065 Premium Packages – Sell Digital Products Secure…)
- [CVE-2024-10034](https://cve.now/CVE-2024-10034.md): Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery \<= 3.2.4.2 - Authenticated (Editor+) Stored Cross-Site Scripting (CVSS 5.5, gallerycreator Mixed Media Gallery Blocks)
- [CVE-2024-11601](https://cve.now/CVE-2024-11601.md): Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) \<= 2.6.1 - Cross-Site Request Forgery to Limited Arbitrary Options Update (CVSS 8.1, wowdevs Sky Addons – Elementor Addons with Widgets & Templa…)
- [CVE-2024-11355](https://cve.now/CVE-2024-11355.md): Ultimate YouTube Video & Shorts Player With Vimeo \<= 3.3 - Missing Authorization to Authenticated (Subscriber+) Setting Exposure (CVSS 4.3, codelizarplugs Ultimate YouTube Video & Shorts Player With…)
- [CVE-2024-11104](https://cve.now/CVE-2024-11104.md): Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) \<= 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update (CVSS 8.1, wowdevs Sky Addons – Elementor Addons with Widgets & Templa…)
- [CVE-2024-11381](https://cve.now/CVE-2024-11381.md): Control horas \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, cesarmaeso Control horas)
- [CVE-2024-38296](https://cve.now/CVE-2024-38296.md): Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain an Exposure of Sensi (CVSS 6.7, Dell Edge Gateway)
- [CVE-2024-47142](https://cve.now/CVE-2024-47142.md): AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L firmware Ver.2.03 and earlier contain an issue with insufficiently pr (CVSS 5.5, AIPHONE CO. IXG-2C7 · AIPHONE CO. IXG-2C7-L)
- [CVE-2024-45837](https://cve.now/CVE-2024-45837.md): Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. (CVSS 5.4, AIPHONE CO. IX-MV · AIPHONE CO. IX-MV7-HB +54)
- [CVE-2024-39290](https://cve.now/CVE-2024-39290.md): Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. (CVSS 6.5, AIPHONE CO. IX-MV · AIPHONE CO. IX-MV7-HB +52)
- [CVE-2024-31408](https://cve.now/CVE-2024-31408.md): OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. (CVSS 8.0, AIPHONE CO. IX-MV · AIPHONE CO. IX-MV7-HB +52)
- [CVE-2024-37782](https://cve.now/CVE-2024-37782.md): An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access sensitive data or exe (CVSS 9.8)
- [CVE-2024-37783](https://cve.now/CVE-2024-37783.md): A reflected cross-site scripting (XSS) vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to inject malicious JavaScri (CVSS 6.1)
- [CVE-2024-44786](https://cve.now/CVE-2024-44786.md): Incorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address books via unspecified vectors. (CVSS 7.5)
- [CVE-2024-47863](https://cve.now/CVE-2024-47863.md): An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x before 23.04.23, an (CVSS 6.2)
- [CVE-2024-50657](https://cve.now/CVE-2024-50657.md): An issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate privileges via the PassCodeViewModel class, spec (CVSS 6.8)
- [CVE-2024-50965](https://cve.now/CVE-2024-50965.md): Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an attacker to execute arb (CVSS 5.4)
- [CVE-2024-51072](https://cve.now/CVE-2024-51072.md): An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to cause a Denial of Service (DoS) via EC (CVSS 5.3)
- [CVE-2024-51073](https://cve.now/CVE-2024-51073.md): An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt CAN communication b (CVSS 6.7)
- [CVE-2024-51074](https://cve.now/CVE-2024-51074.md): Incorrect access control in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to arbitrarily change odo (CVSS 6.7)
- [CVE-2024-52723](https://cve.now/CVE-2024-52723.md): In TOTOLINK X6000R V9.4.0cu.1041\_B20240224 in the shttpd file, the Uci\_Set Str function is used without strict parameter filtering. (CVSS 9.8)
- [CVE-2024-52726](https://cve.now/CVE-2024-52726.md): CRMEB v5.4.0 is vulnerable to Arbitrary file read in the save\_basics function which allows an attacker to obtain sensitive information (CVSS 7.5)
- [CVE-2024-53438](https://cve.now/CVE-2024-53438.md): EventAttendance.php in ChurchCRM 5.7.0 is vulnerable to SQL injection. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.