VYPR

CVEs

115,474 total · page 842 of 2,310

AllCriticalHighKEV
  • CVE-2024-53899HigNov 24, 2024
    Virtualenv
    Virtualenv
    risk 0.44cvss 7.8epss 0.02

    virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

  • CVE-2024-11632HigNov 23, 2024
    Fabian
    Simple Car Rental System
    risk 0.48cvss 7.3epss 0.01

    A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /book_car.php. The manipulation of the argument fname/id_no/gender/email/phone/location leads to sql injection. It is possible…

  • CVE-2024-11034HigNov 23, 2024
    WordPress
    Request a Quote for WooCommerce and Elementor
    risk 0.41cvss 7.3epss 0.01

    The The Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation plugin for WordPress is vulnerable to arbitrary shortcode execution via fire_contact_form AJAX action in all versions up to, and including, 1.4. This…

  • CVE-2024-9941HigNov 23, 2024
    Mojoomla
    Wordpress Gym Management System
    risk 0.57cvss 8.8epss 0.01

    The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the MJ_gmgt_add_staff_member() function in all versions up to, and including, 67.1.0. This makes it possible for authenticated attackers,…

  • CVE-2024-9660HigNov 23, 2024
    WordPress
    School Management System For Wordpress
    risk 0.57cvss 8.8epss 0.01

    The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the mj_smgt_load_documets_new() and mj_smgt_load_documets() functions in all versions up to, and including, 91.5.0. This makes it…

  • CVE-2024-10803HigNov 23, 2024
    WordPress
    Mp3 Sticky Player
    risk 0.49cvss 7.5epss 0.01

    The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can…

  • CVE-2024-10873HigNov 23, 2024
    WordPress
    LA-Studio Element Kit for Elementor
    risk 0.57cvss 8.8epss 0.01

    The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.2 via the _load_template function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include…

  • CVE-2024-11415HigNov 23, 2024
    WordPress
    Wp Orphanage Extended
    risk 0.57cvss 8.8epss 0.00

    The WP-Orphanage Extended plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation on the wporphanageex_menu_settings() function. This makes it possible for unauthenticated…

  • CVE-2024-0122HigNov 23, 2024
    Nvidia
    Delegated Licensing Service
    risk 0.49cvss 7.6epss 0.00

    NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker may cause an unauthorized action. A successful exploit of this vulnerability may lead to partial denial of service and confidential information disclosure.

  • CVE-2024-50054HigNov 22, 2024
    Cisagov
    ICS Advisory 24-326-07
    risk 0.49cvss 7.5epss 0.01

    The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker to perform a path traversal attack and retrieve arbitrary files from the file system.

  • CVE-2024-45369HigNov 22, 2024
    risk 0.53cvss 8.1epss 0.01

    The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and authorized resource.

  • CVE-2024-9767HigNov 22, 2024
    IrfanView
    Irfanview
    risk 0.51cvss 7.8epss 0.00

    IrfanView SID File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2024-9261HigNov 22, 2024
    IrfanView
    Irfanview
    risk 0.51cvss 7.8epss 0.00

    IrfanView SID File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2024-9260HigNov 22, 2024
    IrfanView
    Irfanview
    risk 0.51cvss 7.8epss 0.00

    IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2024-9259HigNov 22, 2024
    IrfanView
    Irfanview
    risk 0.51cvss 7.8epss 0.00

    IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2024-9258HigNov 22, 2024
    IrfanView
    Irfanview
    risk 0.51cvss 7.8epss 0.00

    IrfanView SID File Parsing Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2024-9256HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.46cvss 7.1epss 0.00

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-9255HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.01

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2024-9254HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.57cvss 8.8epss 0.01

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2024-9253HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.46cvss 7.1epss 0.00

    Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-9252HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-9251HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-9250HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.01

    Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2024-9249HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.46cvss 7.1epss 0.01

    Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-9248HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.01

    Foxit PDF Reader PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-9247HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2024-9246HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.46cvss 7.1epss 0.00

    Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-9245HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute…

  • CVE-2024-9244HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute…

  • CVE-2024-9243HigNov 22, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader AcroForm Doc Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2024-9114HigNov 22, 2024
    Faststone
    Image Viewer
    risk 0.51cvss 7.8epss 0.00

    FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability…

  • CVE-2024-9113HigNov 22, 2024
    Faststone
    Image Viewer
    risk 0.51cvss 7.8epss 0.00

    FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability…

  • CVE-2024-9112HigNov 22, 2024
    Faststone
    Image Viewer
    risk 0.51cvss 7.8epss 0.00

    FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability…

  • CVE-2024-8357HigNov 22, 2024
    Visteon
    Infotainment
    risk 0.51cvss 7.8epss 0.00

    Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. Although authentication is required to…

  • CVE-2024-8356HigNov 22, 2024
    Visteon
    Infotainment
    risk 0.51cvss 7.8epss 0.00

    Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the…

  • CVE-2024-8025HigNov 22, 2024
    Nikon
    Nef Codec
    risk 0.51cvss 7.8epss 0.00

    Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this…

  • CVE-2024-7565HigNov 22, 2024
    Smartbear
    Soapui
    risk 0.51cvss 7.8epss 0.01

    SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of SMARTBEAR SoapUI. User interaction is required to exploit this vulnerability in that the…

  • CVE-2024-7510HigNov 22, 2024
    Trimble
    Sketchup
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2024-7509HigNov 22, 2024
    Trimble
    Sketchup
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in…

  • CVE-2024-7508HigNov 22, 2024
    Trimble
    Sketchup Viewer
    risk 0.51cvss 7.8epss 0.00

    Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this…

  • CVE-2024-7352HigNov 22, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2024-7253HigNov 22, 2024
    Nomachine
    Nomachine
    risk 0.51cvss 7.8epss 0.00

    NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target…

  • CVE-2024-7245HigNov 22, 2024
    Pandasecurity
    Dome
    risk 0.51cvss 7.8epss 0.00

    Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute…

  • CVE-2024-7244HigNov 22, 2024
    Pandasecurity
    Dome
    risk 0.51cvss 7.8epss 0.00

    Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-7243HigNov 22, 2024
    Pandasecurity
    Dome
    risk 0.51cvss 7.8epss 0.00

    Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target…

  • CVE-2024-7242HigNov 22, 2024
    Pandasecurity
    Dome
    risk 0.51cvss 7.8epss 0.00

    Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target…

  • CVE-2024-7241HigNov 22, 2024
    Pandasecurity
    Dome
    risk 0.51cvss 7.8epss 0.00

    Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target…

  • CVE-2024-7240HigNov 22, 2024
    F-Secure
    Total
    risk 0.51cvss 7.8epss 0.00

    F-Secure Total Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of F-Secure Total. User interaction on the part of an administrator is required to exploit this vulnerability. The…

  • CVE-2024-7239HigNov 22, 2024
    Vipre
    Advanced Security
    risk 0.51cvss 7.8epss 0.00

    VIPRE Advanced Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-7238HigNov 22, 2024
    Vipre
    Advanced Security
    risk 0.51cvss 7.8epss 0.00

    VIPRE Advanced Security SBAMSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged…