VulDB Recent Entries

A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.6(468). Affected by this issue is the function fromqossetting of the file /goform/fromqossetting. The manipulation of the argument qos leads to stack-based buffer overflow. This vulnerability is handled as CVE-2024-46044. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users[] with the input 1'+AND+(SELECT+3220+FROM+(SELECT(SLEEP(5)))ZNun)+AND+'WwBM'%3d'WwBM as part of POST Request Parameter leads to sql injection. This vulnerability is known as CVE-2024-8784. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16. Affected is an unknown function of the file system/pages/forum/new_post.php of the component Post Reply Handler. The manipulation of the argument post_topic leads to cross site scripting. This vulnerability is traded as CVE-2024-8783. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The identification of this vulnerability is CVE-2024-8782. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Adobe ColdFusion up to 2021.12/2023.6. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to improper authentication. This vulnerability was named CVE-2024-45113. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Photoshop Desktop up to 24.7.4/25.11. It has been classified as critical. This affects an unknown part. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2024-45109. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Photoshop Desktop up to 24.7.4/25.11 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2024-45108. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Adobe Photoshop Desktop up to 24.7.4/25.11 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to heap-based buffer overflow. This vulnerability is known as CVE-2024-43756. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as very critical, was found in Adobe ColdFusion up to 2021.15/2023.9. Affected is an unknown function. The manipulation leads to deserialization. This vulnerability is traded as CVE-2024-41874. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Adobe Illustrator up to 27.9.5/28.6. This issue affects some unknown processing. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2024-43759. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in TNB Mobile Solutions Cockpit Software up to 2.12. This vulnerability affects unknown code. The manipulation leads to hard-coded credentials. This vulnerability was named CVE-2024-6656. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Adobe Acrobat Reader up to 20.005.30655/24.002.21005/24.001.30159/24.003.20054. This affects an unknown part. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2024-41869. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Illustrator up to 27.9.5/28.6. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to use after free. This vulnerability is handled as CVE-2024-43758. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Illustrator up to 27.9.5/28.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to integer underflow. This vulnerability is known as CVE-2024-41857. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Illustrator up to 27.9.5/28.6. It has been classified as critical. Affected is an unknown function. The manipulation leads to integer overflow. This vulnerability is traded as CVE-2024-34121. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Acrobat Reader up to 20.005.30655/24.002.21005/24.001.30159/24.003.20054 and classified as critical. This issue affects some unknown processing. The manipulation leads to type confusion. The identification of this vulnerability is CVE-2024-45112. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Adobe Illustrator up to 27.9.5/28.6 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-45111. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Adobe After Effects up to 23.6.6/24.5. This affects an unknown part. The manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2024-41867. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Adobe After Effects up to 23.6.6/24.5. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2024-41859. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Adobe After Effects up to 23.6.6/24.5. Affected by this vulnerability is an unknown functionality. The manipulation leads to heap-based buffer overflow. This vulnerability is known as CVE-2024-39380. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.