High - CVE-2024-33581 - A DLL hijack vulnerability was reported in...
A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated privileges.
Medium - CVE-2024-39526 - An Improper Handling of Exceptional Conditions...
An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series with MPC10/MPC11/LC9600 line cards, EX9200 with EX9200-15C lines cards,...
Medium - CVE-2024-39527 - An Exposure of Sensitive Information to an...
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the command-line interface (CLI) of Juniper Networks Junos OS on SRX Series devices allows a local, low-privileged...
Medium - CVE-2024-39534 - An Incorrect Comparison vulnerability in the...
An Incorrect Comparison vulnerability in the local address verification API of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker to create sessions or send...
Medium - CVE-2024-39544 - An Incorrect Default Permissions vulnerability...
An Incorrect Default Permissions vulnerability in the command line interface (CLI) of Juniper Networks Junos OS Evolved allows a low privileged local attacker to view NETCONF traceoptions files,...
High - CVE-2024-39547 - An Improper Handling of Exceptional Conditions...
An Improper Handling of Exceptional Conditions vulnerability in the rpd-server of Juniper Networks Junos OS and Junos OS Evolved within cRPD allows an unauthenticated network-based attacker sending...
NA - CVE-2024-39563 - A Command Injection vulnerability in Juniper...
A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker sending a specially crafted request to execute arbitrary shell commands on the...
NA - CVE-2024-42640 - angular-base64-upload prior to v0.1.21 is...
angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to...
NA - CVE-2024-44729 - Incorrect access control in the component...
Incorrect access control in the component app/src/server.js of Mirotalk before commit 9de226 allows unauthenticated attackers without presenter privileges to arbitrarily eject users from a meeting.