9.3

CVSS4.0

CVE-2024-41988 - Missing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family Transmitter

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and is available to other applications that…

πŸ“… Published: Oct. 3, 2024, 5:40 p.m. πŸ”„ Last Modified: Oct. 4, 2024, 1:50 p.m.

8.6

CVSS4.0

CVE-2024-41987 - Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter

The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malici…

πŸ“… Published: Oct. 3, 2024, 5:38 p.m. πŸ”„ Last Modified: July 12, 2025, 10 p.m.

5.8

CVSS3.1

CVE-2024-47762 - Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend

Backstage is an open framework for building developer portals. Configuration supplied through APP_CONFIG_* environment variables, for example APP_CONFIG_backend_listen_port=7007, where unexpectedly ignoring the visibility defined in configuration schema. This occurred even if the configuration sche…

πŸ“… Published: Oct. 3, 2024, 5:14 p.m. πŸ”„ Last Modified: Oct. 4, 2024, 1:50 p.m.

9.8

CVSS3.1

CVE-2024-7824 - Type-confusion vulnerability that can cause the WRSA.exe service to crash and generate a crash dump

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.

πŸ“… Published: Oct. 3, 2024, 5:05 p.m. πŸ”„ Last Modified: Oct. 30, 2024, 1:50 p.m.

9.8

CVSS3.1

CVE-2024-7825 - Type confusion that can cause the WRSA.exe service to crash and generate a crash dump

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.

πŸ“… Published: Oct. 3, 2024, 5:05 p.m. πŸ”„ Last Modified: Oct. 30, 2024, 1:49 p.m.

9.8

CVSS3.1

CVE-2024-7826 - Unhandled exception vulnerability that can cause the WRSA.exe service to crash and generate a crash…

Improper Check for Unusual or Exceptional Conditions vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrURL.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.

πŸ“… Published: Oct. 3, 2024, 5:05 p.m. πŸ”„ Last Modified: Oct. 30, 2024, 1:48 p.m.

3.3

CVSS3.1

CVE-2024-0125 - NVIDIA CUDA Toolkit: NULL pointer dereference via malformed ELF file

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by running nvdisasm on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service.

πŸ“… Published: Oct. 3, 2024, 4:46 p.m. πŸ”„ Last Modified: Sept. 18, 2025, 6:11 p.m.

3.3

CVSS3.1

CVE-2024-0124 - NVIDIA CUDA Toolkit: use after free may lead to DoS

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by running it on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service.

πŸ“… Published: Oct. 3, 2024, 4:45 p.m. πŸ”„ Last Modified: Sept. 18, 2025, 6:10 p.m.

3.3

CVSS3.1

CVE-2024-0123 - NVIDIA CUDA Toolkit: improper input validation may lead to DoS

NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an improper validation in input issue by tricking the user into running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial of…

πŸ“… Published: Oct. 3, 2024, 4:45 p.m. πŸ”„ Last Modified: Sept. 18, 2025, 6:10 p.m.

5.3

CVSS3.1

CVE-2024-8508 - Unbounded name compression could lead to Denial of Service

NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression to…

πŸ“… Published: Oct. 3, 2024, 4:27 p.m. πŸ”„ Last Modified: Dec. 17, 2024, 7:28 p.m.
Total resulsts: 342273
Page 7718 of 34,228
Β« previous page Β» next page
Filters