VYPR

CVEs

132,098 total · page 1337 of 2,642

AllCriticalHighKEV
  • CVE-2024-2410HigMay 3, 2024
    Google
    Protobuf
    risk 0.49cvss 7.6epss 0.00

    The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed. 

  • CVE-2024-4461HigMay 3, 2024
    SugarSync
    SugarSync
    risk 0.51cvss 7.8epss 0.00

    Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.

  • CVE-2024-34073HigMay 3, 2024
    AWS
    Sagemaker Python SDK
    risk 0.44cvss 7.8epss 0.01

    sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. In affected versions the capture_dependencies function in `sagemaker.serve.save_retrive.version_1_0_0.save.utils` module allows for potentially unsafe Operating System (OS)…

  • CVE-2024-34072HigMay 3, 2024
    AWS
    Sagemaker Python SDK
    risk 0.44cvss 7.8epss 0.00

    sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.base_deserializers.NumpyDeserializer module before v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickled object arrays.…

  • CVE-2024-33924HigMay 3, 2024
    WordPress
    Realtyna Organic IDX
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Organic IDX plugin allows Reflected XSS.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4.

  • CVE-2024-32810HigMay 3, 2024
    WordPress
    Shortpixel Critical CSS
    risk 0.49cvss 7.6epss 0.00

    Missing Authorization vulnerability in ShortPixel ShortPixel Critical CSS.This issue affects ShortPixel Critical CSS: from n/a through 1.0.2.

  • CVE-2024-33947HigMay 3, 2024
    Metagauss
    Registrationmagic
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss RegistrationMagic allows Reflected XSS.This issue affects RegistrationMagic: from n/a through 5.3.2.0.

  • CVE-2024-33946HigMay 3, 2024
    WordPress
    WPify Woo Czech
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPify s.R.O. WPify Woo Czech allows Reflected XSS.This issue affects WPify Woo Czech: from n/a through 4.0.10.

  • CVE-2024-33928HigMay 3, 2024
    WordPress
    Patron Button and Widgets for Patreon
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon allows Reflected XSS.This issue affects CodeBard's Patron Button and Widgets for Patreon: from n/a through 2.2.0.

  • CVE-2024-4439HigMay 3, 2024
    WordPress
    WordPress
    risk 0.45cvss 7.2epss 0.71

    WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with contributor-level access and…

  • CVE-2023-51629HigMay 3, 2024
    Dlink
    DCS-8300LHV2
    risk 0.58cvss 8.8epss 0.04

    D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit this vulnerability. …

  • CVE-2023-51628HigMay 3, 2024
    Dlink
    DCS-8300LHV2
    risk 0.52cvss 8.0epss 0.01

    D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required…

  • CVE-2023-51627HigMay 3, 2024
    Dlink
    DCS-8300LHV2
    risk 0.52cvss 8.0epss 0.01

    D-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required to…

  • CVE-2023-51626HigMay 3, 2024
    Dlink
    DCS-8300LHV2
    risk 0.57cvss 8.8epss 0.01

    D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras.…

  • CVE-2023-51625HigMay 3, 2024
    Dlink
    DCS-8300LHV2
    risk 0.52cvss 8.0epss 0.02

    D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required…

  • CVE-2023-51624HigMay 3, 2024
    Dlink
    DCS-8300LHV2
    risk 0.57cvss 8.8epss 0.01

    D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication…

  • CVE-2023-51613HigMay 3, 2024
    Dlink
    DIR-X3260
    risk 0.52cvss 8.0epss 0.01

    D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to…

  • CVE-2023-51608HigMay 3, 2024
    Kofax
    Power PDF
    risk 0.51cvss 7.8epss 0.01

    Kofax Power PDF J2K File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-51606HigMay 3, 2024
    Kofax
    Power PDF
    risk 0.51cvss 7.8epss 0.01

    Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-51603HigMay 3, 2024
    Honeywell
    Saia Pg5 Controls Suite
    risk 0.57cvss 8.8epss 0.02

    Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to…

  • CVE-2023-51599HigMay 3, 2024
    Honeywell
    Saia Pg5 Controls Suite
    risk 0.57cvss 8.8epss 0.02

    Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this…

  • CVE-2023-51598HigMay 3, 2024
    Hancom
    Office Word
    risk 0.57cvss 8.8epss 0.01

    Hancom Office Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Word. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-51597HigMay 3, 2024
    Kofax
    Power PDF
    risk 0.51cvss 7.8epss 0.01

    Kofax Power PDF U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-51596HigMay 3, 2024
    Bluez
    Bluez
    risk 0.46cvss 7.1epss 0.02

    BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-51591HigMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.49cvss 7.5epss 0.01

    Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authentication is not required…

  • CVE-2023-51588HigMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.51cvss 7.8epss 0.00

    Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to…

  • CVE-2023-51587HigMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.52cvss 7.5epss 0.36

    Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit…

  • CVE-2023-51585HigMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.57cvss 8.8epss 0.01

    Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit this…

  • CVE-2023-51584HigMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.57cvss 8.8epss 0.01

    Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit…

  • CVE-2023-51579HigMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.51cvss 7.8epss 0.00

    Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute…

  • CVE-2023-51578HigMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.49cvss 7.5epss 0.01

    Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit…

  • CVE-2023-51577HigMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.51cvss 7.8epss 0.00

    Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute…

  • CVE-2023-51569HigMay 3, 2024
    Kofax
    Power PDF
    risk 0.51cvss 7.8epss 0.00

    Kofax Power PDF BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-51566HigMay 3, 2024
    Kofax
    Power PDF
    risk 0.51cvss 7.8epss 0.01

    Kofax Power PDF OXPS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in…

  • CVE-2023-51565HigMay 3, 2024
    Kofax
    Power PDF
    risk 0.51cvss 7.8epss 0.01

    Kofax Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-51563HigMay 3, 2024
    Kofax
    Power PDF
    risk 0.51cvss 7.8epss 0.01

    Kofax Power PDF XPS File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-51560HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2023-51557HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-51556HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-51552HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-51551HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-51549HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader AcroForm Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-50235HigMay 3, 2024
    Hancom
    Office Show
    risk 0.51cvss 7.8epss 0.00

    Hancom Office Show PPT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Show. User interaction is required to exploit this vulnerability…

  • CVE-2023-50234HigMay 3, 2024
    Hancom
    Office Cell
    risk 0.51cvss 7.8epss 0.00

    Hancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Cell. User interaction is required to exploit this vulnerability…

  • CVE-2023-50233HigMay 3, 2024
    Inductive Automation
    Ignition
    risk 0.57cvss 8.8epss 0.02

    Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this…

  • CVE-2023-50232HigMay 3, 2024
    Inductive Automation
    Ignition
    risk 0.57cvss 8.8epss 0.01

    Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this…

  • CVE-2023-50230HigMay 3, 2024
    Bluez
    Bluez
    risk 0.00cvss 8.0epss 0.01

    BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-50229HigMay 3, 2024
    Bluez
    Bluez
    risk 0.00cvss 8.0epss 0.02

    BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-50228HigMay 3, 2024
    Parallels
    Desktop
    risk 0.51cvss 7.8epss 0.00

    Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to…

  • CVE-2023-50227HigMay 3, 2024
    Parallels
    Desktop
    risk 0.54cvss 8.3epss 0.01

    Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Parallels Desktop. User interaction is required to exploit this vulnerability in that the…