2024-10-08 - CVE Archive

CVE-2024-45471 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All. Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Tecnomatix Plant Simulation

NVD

CVSS 4.0

7.3

EPSS

0.3%

CVE-2024-45470 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All. Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Tecnomatix Plant Simulation

NVD

CVSS 4.0

7.3

EPSS

0.2%

CVE-2024-45469 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All. Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Tecnomatix Plant Simulation

NVD

CVSS 4.0

7.3

EPSS

0.3%

CVE-2024-45468 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All. Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Siemens Tecnomatix Plant Simulation

NVD

CVSS 4.0

7.3

EPSS

0.2%

CVE-2024-45467 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All. Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Siemens Tecnomatix Plant Simulation

NVD

CVSS 4.0

7.3

EPSS

0.2%

CVE-2024-45466 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All. Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Information Disclosure Siemens Tecnomatix Plant Simulation

NVD

CVSS 4.0

7.3

EPSS

0.2%

CVE-2024-45465 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All. Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Information Disclosure Siemens Tecnomatix Plant Simulation

NVD

CVSS 4.0

7.3

EPSS

0.2%

CVE-2024-45464 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All. Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Information Disclosure Siemens Tecnomatix Plant Simulation

NVD

CVSS 4.0

7.3

EPSS

0.2%

CVE-2024-45463 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All. Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Information Disclosure Siemens Tecnomatix Plant Simulation

NVD

CVSS 4.0

7.3

EPSS

0.3%

CVE-2024-41981 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Heap Overflow

NVD

CVSS 4.0

7.3

EPSS

0.2%

CVE-2024-41902 Oct 08, 09:15 HIGH This Week

A vulnerability has been identified in JT2Go (All versions < V2406.0003). Rated high severity (CVSS 7.3), this vulnerability is no authentication required. No vendor patch available.

Buffer Overflow Stack Overflow Siemens Jt2Go

NVD

CVSS 4.0

7.3

EPSS

0.2%

CVE-2024-9381 Oct 08, 17:15 HIGH This Week

Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Path Traversal Ivanti Endpoint Manager Cloud Services Appliance

NVD

CVSS 3.1

7.2

EPSS

15.7%

CVE-2024-9380 Oct 08, 17:15 HIGH KEV EUVD KEV THREAT This Week

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Command Injection Ivanti Endpoint Manager Cloud Services Appliance

NVD

CVSS 3.1

7.2

EPSS

63.0%

CVE-2024-9379 Oct 08, 17:15 HIGH KEV THREAT This Week

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Ivanti Endpoint Manager Cloud Services Appliance

NVD

CVSS 3.1

7.2

EPSS

43.6%

CVE-2024-45330 Oct 08, 15:15 HIGH This Week

A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Fortinet Fortianalyzer Fortianalyzer Cloud

NVD

CVSS 3.1

7.2

EPSS

0.6%

CVE-2024-43615 Oct 08, 18:15 HIGH PATCH This Week

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable.

RCE SSH Microsoft Windows 10 1809 Windows 10 21h2 +8

NVD

CVSS 3.1

7.1

EPSS

1.1%

CVE-2024-43581 Oct 08, 18:15 HIGH PATCH This Week

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable.

RCE SSH Microsoft Windows 10 1809 Windows 10 21h2 +8

NVD

CVSS 3.1

7.1

EPSS

1.3%

CVE-2024-43502 Oct 08, 18:15 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. This Use of Uninitialized Resource vulnerability could allow attackers to access uninitialized memory causing crashes or information disclosure.

Information Disclosure Microsoft Windows 10 1809 Windows 10 21h2 Windows 10 22h2 +1

NVD

CVSS 3.1

7.1

EPSS

6.0%

CVE-2024-38097 Oct 08, 18:15 HIGH PATCH This Week

Azure Monitor Agent Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.

Information Disclosure Microsoft Azure Monitor Agent

NVD

CVSS 3.1

7.1

EPSS

0.6%

CVE-2024-20659 Oct 08, 18:15 HIGH This Week

Windows Hyper-V Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1809 Windows 10 21h2 Windows 10 22h2 +7

NVD

CVSS 3.1

7.1

EPSS

0.9%

CVE-2024-43570 Oct 08, 18:15 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1507 +14

NVD

CVSS 3.1

7.0

EPSS

0.5%

CVE-2024-43553 Oct 08, 18:15 HIGH PATCH This Week

NT OS Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +12

NVD

CVSS 3.1

7.0

EPSS

0.5%

CVE-2024-43535 Oct 08, 18:15 HIGH PATCH This Week

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1507 +14

NVD

CVSS 3.1

7.0

EPSS

0.5%

CVE-2024-43522 Oct 08, 18:15 HIGH PATCH This Week

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Buffer Overflow Heap Overflow Microsoft Windows 11 22h2 Windows 11 23h2

NVD

CVSS 3.1

7.0

EPSS

0.5%

CVE-2024-43511 Oct 08, 18:15 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

7.0

EPSS

0.4%

CVE-2024-7206 Oct 08, 07:15 HIGH This Week

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware. Rated high severity (CVSS 7.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass

NVD

CVSS 4.0

7.0

EPSS

0.2%