7.8

CVSS3.1

CVE-2024-8357 - Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware Local Privilege Escalation…

Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. Although authentication is required to exploit this vulnerab…

📅 Published: Nov. 22, 2024, 9:32 p.m. 🔄 Last Modified: Dec. 11, 2024, 4:05 a.m.

7.8

CVSS3.1

CVE-2024-8356 - Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Esca…

Visteon Infotainment VIP MCU Code Insufficient Validation of Data Authenticity Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute l…

📅 Published: Nov. 22, 2024, 9:32 p.m. 🔄 Last Modified: Dec. 11, 2024, 4:10 a.m.

6.8

CVSS3.1

CVE-2024-8355 - Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability

Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment system. Authentication is not required to exploit this vulnerability. The spec…

📅 Published: Nov. 22, 2024, 9:32 p.m. 🔄 Last Modified: Dec. 19, 2024, 6:47 p.m.

7.8

CVSS3.1

CVE-2024-7565 - SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability

SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of SMARTBEAR SoapUI. User interaction is required to exploit this vulnerability in that the target must visit a malic…

📅 Published: Nov. 22, 2024, 9:32 p.m. 🔄 Last Modified: Dec. 19, 2024, 7:15 p.m.

5.5

CVSS3.1

CVE-2024-7511 - Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the targe…

📅 Published: Nov. 22, 2024, 9:32 p.m. 🔄 Last Modified: Dec. 3, 2024, 9:31 p.m.

7.8

CVSS3.1

CVE-2024-7510 - Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malici…

📅 Published: Nov. 22, 2024, 9:32 p.m. 🔄 Last Modified: Dec. 3, 2024, 9:36 p.m.

7.8

CVSS3.1

CVE-2024-7509 - Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must v…

📅 Published: Nov. 22, 2024, 9:31 p.m. 🔄 Last Modified: Dec. 3, 2024, 9:54 p.m.

7.8

CVSS3.1

CVE-2024-7508 - Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabi…

Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the …

📅 Published: Nov. 22, 2024, 9:31 p.m. 🔄 Last Modified: Dec. 4, 2024, 5:36 p.m.

6.5

CVSS3.1

CVE-2024-7392 - ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability

ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not required to exploit this vulnerability.…

📅 Published: Nov. 22, 2024, 9:31 p.m. 🔄 Last Modified: Dec. 3, 2024, 10:17 p.m.

5.7

CVSS3.1

CVE-2024-7391 - ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability

ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of ChargePoint Home Flex charging devices. User interaction is required to exploit this vulnerability. T…

📅 Published: Nov. 22, 2024, 9:31 p.m. 🔄 Last Modified: Dec. 3, 2024, 9:44 p.m.
Total resulsts: 346671
Page 7471 of 34,668
« previous page » next page
Filters