CVE-2024-11xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

961 records · Page 5 of 10

• CVE-2024-11587: idcCMS classProvCity.php GetCityOptionJs cross site scripting 5.3 Medium

  A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

  Updated 2024-11-21
• CVE-2024-11586: Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected. 4.0 Medium

  Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected.

  Updated 2024-11-25
• CVE-2024-11585: WP Hide & Security Enhancer <= 2.5.1 - Missing Authorization to Unauthenticated Arbitrary File Contents Deletion 7.5 High

  The WP Hide & Security Enhancer plugin for WordPress is vulnerable to arbitrary file contents deletion due to a missing authorization and insufficient file path validation in the file-process.php in all versions up to, and including, 2.5.1. This makes it possible for unauthenticated attackers to delete the contents of arbitrary files on the server, which can break the site or lead to data loss.

  Updated 2026-04-08
• CVE-2024-11584: cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used f 5.9 Medium

  cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands.

  Updated 2025-06-26
• CVE-2024-11583: Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.5.9 - Missing Authorization to Icon Font Deletion 4.3 Medium

  The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'remove_zipped_font' function in all versions up to, and including, 1.5.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete icon fonts that were previously up

  Updated 2026-04-08
• CVE-2024-11582: Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter 7.2 High

  The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ip parameter in all versions up to, and including, 10.43 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

  Updated 2026-04-08
• CVE-2024-11581: Luxion KeyShot JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  Luxion KeyShot JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of jt files. The issue

  Updated 2024-12-04
• CVE-2024-11580: Luxion KeyShot ABC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High

  Luxion KeyShot ABC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of abc files.

  Updated 2024-12-04
• CVE-2024-11579: Luxion KeyShot OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  Luxion KeyShot OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of obj files. The is

  Updated 2024-12-04
• CVE-2024-11578: Luxion KeyShot 3DS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High

  Luxion KeyShot 3DS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files

  Updated 2024-12-04
• CVE-2024-11577: Luxion KeyShot SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  Luxion KeyShot SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The is

  Updated 2024-12-04
• CVE-2024-11576: Luxion KeyShot 3DS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High

  Luxion KeyShot 3DS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS files.

  Updated 2024-12-04
• CVE-2024-11575: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11574: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11573: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11572: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11571: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11570: IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results fro

  Updated 2024-11-22
• CVE-2024-11569: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11568: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11567: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11566: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11565: IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CGM files. The issue results

  Updated 2024-11-22
• CVE-2024-11564: IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results

  Updated 2024-11-22
• CVE-2024-11563: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11562: IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CGM files. The issue results

  Updated 2024-11-22
• CVE-2024-11561: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11560: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11559: IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue result

  Updated 2024-11-22
• CVE-2024-11558: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11557: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11556: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11555: IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue result

  Updated 2024-11-22
• CVE-2024-11554: IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue result

  Updated 2024-11-22
• CVE-2024-11553: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11552: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11551: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11550: IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue result

  Updated 2024-11-22
• CVE-2024-11549: IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue result

  Updated 2024-11-22
• CVE-2024-11548: IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue result

  Updated 2024-11-22
• CVE-2024-11547: IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results

  Updated 2024-11-22
• CVE-2024-11546: IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue result

  Updated 2024-11-22
• CVE-2024-11545: IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results fro

  Updated 2024-11-22
• CVE-2024-11544: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11543: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11542: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11541: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11540: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11539: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11538: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11537: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11536: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11535: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11534: IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11533: IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue result

  Updated 2024-11-22
• CVE-2024-11532: IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue result

  Updated 2024-11-22
• CVE-2024-11531: IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CGM files. The issue results

  Updated 2024-11-22
• CVE-2024-11530: IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CGM files. The issue results

  Updated 2024-11-22
• CVE-2024-11529: IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results

  Updated 2024-11-22
• CVE-2024-11528: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11527: IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results

  Updated 2024-11-22
• CVE-2024-11526: IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CGM files. The issue results

  Updated 2024-11-22
• CVE-2024-11525: IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results fro

  Updated 2024-11-22
• CVE-2024-11524: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11523: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11522: IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results

  Updated 2024-11-22
• CVE-2024-11521: IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability 7.8 High

  IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DJVU files. The issue results f

  Updated 2024-11-22
• CVE-2024-11520: IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ARW files. The issue result

  Updated 2024-11-22
• CVE-2024-11519: IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability 7.8 High

  IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RLE files. The issue results

  Updated 2024-11-22
• CVE-2024-11518: IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High

  IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RLE files. The issue

  Updated 2024-11-22
• CVE-2024-11517: IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPM files. The issue result

  Updated 2024-11-22
• CVE-2024-11516: IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High

  IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPM files. The issue

  Updated 2024-11-22
• CVE-2024-11515: IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPM files. The issue result

  Updated 2024-11-22
• CVE-2024-11514: IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High

  IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ECW files. The issue

  Updated 2024-11-22
• CVE-2024-11513: IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High

  IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ECW files. The issue

  Updated 2024-11-22
• CVE-2024-11512: IrfanView WBZ Plugin WB1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High

  IrfanView WBZ Plugin WB1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WB1 files. The i

  Updated 2024-11-22
• CVE-2024-11511: IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High

  IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XCF files

  Updated 2024-11-22
• CVE-2024-11510: IrfanView WBZ plugin WB1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High

  IrfanView WBZ plugin WB1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WB1 file

  Updated 2024-11-22
• CVE-2024-11509: IrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 High

  IrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SVG files. The issue

  Updated 2024-11-22
• CVE-2024-11508: IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results fro

  Updated 2024-11-22
• CVE-2024-11507: IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability 7.8 High

  IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results fro

  Updated 2024-11-22
• CVE-2024-11506: IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability 7.8 High

  IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results

  Updated 2024-11-22
• CVE-2024-11505: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  Updated 2025-07-05 · Rejected record
• CVE-2024-11504: SQL Injection in Streamsoft Prestiż 8.6 High

  Input from multiple fields in Streamsoft Prestiż is not sanitized properly, leading to an SQL injection vulnerability, which might be exploited by an authenticated remote attacker.  This issue was fixed in 18.1.376.37 version of the software.

  Updated 2025-03-28
• CVE-2024-11503: WP Tabs < 2.2.7 - Admin+ Stored XSS 6.1 Medium

  The WP Tabs WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

  Updated 2025-03-25
• CVE-2024-11502: Planning Center Online Giving <= 1.0.0 - Contributor+ XSS via Shortcode 5.4 Medium

  The Planning Center Online Giving WordPress plugin through 1.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

  Updated 2025-05-20
• CVE-2024-11501: Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection 8.8 High

  The Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via deserialization of untrusted input from wd_gallery_$id parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additiona

  Updated 2026-04-08
• CVE-2024-11499: A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability 6.9 Medium

  A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and authorized attacker to perform a CMU restart. The vulnerability can be triggered if certificates are updated while in use on active connections. The affected CMU will automatically recover itself if an attacker successfully exploits this vulnerability.

  Updated 2025-03-25
• CVE-2024-11498: Resource exhaustion via Stack overflow in libjxl 6.9 Medium

  There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend upgrading past commit 65fbec56bc578b6b6ee02a527be70787bbd053b0.

  Updated 2024-11-25
• CVE-2024-11497: Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation 8.8 High

  An authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access.

  Updated 2025-01-14
• CVE-2024-11496: Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update 6.5 Medium

  The Infility Global plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the infility_global_ajax function in all versions up to, and including, 2.9.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin options and potentially break the site.

  Updated 2026-04-08
• CVE-2024-11495: Buffer overflow in OllyDbg 7.5 High

  Buffer overflow vulnerability in OllyDbg, version 1.10, which could allow a local attacker to execute arbitrary code due to lack of proper bounds checking.

  Updated 2024-11-20
• CVE-2024-11494: **UNSUPPORTED WHEN ASSIGNED** The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware version P-6101CSA6AP_20140331 could allow an unauthenticated attack 7.5 High

  **UNSUPPORTED WHEN ASSIGNED** The improper authentication vulnerability in the Zyxel P-6101C ADSL modem firmware version P-6101CSA6AP_20140331 could allow an unauthenticated attacker to read some device information via a crafted HTTP HEAD method.

  Updated 2024-11-20
• CVE-2024-11493: 115cms pageAE.html cross site scripting 5.3 Medium

  A vulnerability classified as problematic was found in 115cms up to 20240807. This vulnerability affects unknown code of the file /index.php/setpage/admin/pageAE.html. The manipulation of the argument tid leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not

  Updated 2024-11-20
• CVE-2024-11492: 115cms appurladd.html cross site scripting 5.3 Medium

  A vulnerability classified as problematic has been found in 115cms up to 20240807. This affects an unknown part of the file /index.php/admin/web/appurladd.html. The manipulation of the argument tid leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did

  Updated 2024-11-20
• CVE-2024-11491: 115cms useradmin.html cross site scripting 5.3 Medium

  A vulnerability was found in 115cms up to 20240807. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php/admin/web/useradmin.html. The manipulation of the argument ks leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disc

  Updated 2024-11-20
• CVE-2024-11490: 115cms set.html cross site scripting 5.3 Medium

  A vulnerability was found in 115cms up to 20240807. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php/admin/web/set.html. The manipulation of the argument type leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this

  Updated 2024-11-20
• CVE-2024-11489: 115cms file.html cross site scripting 5.3 Medium

  A vulnerability was found in 115cms up to 20240807. It has been classified as problematic. Affected is an unknown function of the file /index.php/admin/web/file.html. The manipulation of the argument ks leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but d

  Updated 2024-11-20
• CVE-2024-11488: 115cms web_user.html cross site scripting 5.3 Medium

  A vulnerability was found in 115cms up to 20240807 and classified as problematic. This issue affects some unknown processing of the file /app/admin/view/web_user.html. The manipulation of the argument ks leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not

  Updated 2024-12-02
• CVE-2024-11487: Code4Berry Decoration Management System Between Dates Reports btndates_report.php sql injection 5.3 Medium

  A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndates_report.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may

  Updated 2024-12-02

Search a CVE ID or check dependency files →