NA - CVE-2024-9029 - A flaw was found in the freeimage library....
A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the read_iptc_profile function in the Source/Metadata/IPTC.cpp file because the size...
Medium - CVE-2024-9049 - The Beaver Builder – WordPress Page Builder...
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button Group module in all versions up to, and including, 2.8.3.6...
NA - CVE-2024-39431 - In UMTS RLC driver, there is a possible out of...
In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.
NA - CVE-2024-39432 - In UMTS RLC driver, there is a possible out of...
In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.
NA - CVE-2024-39433 - In drm service, there is a possible out of...
In drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
NA - CVE-2024-39434 - In drm service, there is a possible out of...
In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
NA - CVE-2024-39435 - In Logmanager service, there is a possible...
In Logmanager service, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed.
NA - CVE-2024-38861 - Improper Certificate Validation in Checkmk...
Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4a_mk...
NA - CVE-2024-41930 - Cross-site scripting vulnerability exists in MF...
Cross-site scripting vulnerability exists in MF Teacher Performance Management System version 6. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the...
NA - CVE-2024-6654 - Products for macOS enables a user logged on to...
Products for macOS enables a user logged on to the system to perform a denial-of-service attack, which could be misused to disable the protection of the ESET security product and cause general...