deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-24102
Published: 2024-07-22
Description: Directory Traversal vulnerability in Punkbuster pbsv.d64 2.351, allows remote attackers to execute arbitrary code.
CVSS Score: 7.6 (HIGH)
CWE: CWE-22
References: https://medium.com/%40prizmant/hacking-punkbuster-e22e6cf2f36e; https://medium.com/%40prizmant/hacking-punkbuster-e22e6cf2f36e
CVE: CVE-2024-28698
Published: 2024-07-22
Description: Directory Traversal vulnerability in Marimer LLC CSLA .Net before 8.0 allows a remote attacker to execute arbitrary code via a crafted script to the MobileFormatter component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/MarimerLLC/csla/pull/3552; https://www.intruder.io/research/path-traversal-and-code-execution-in-csla-net-cve-2024-28698; https://github.com/MarimerLLC/csla/pull/3552
CVE: CVE-2024-40051
Published: 2024-07-22
Description: IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/mrfan6/Demo/blob/main/Analysis.md; https://github.com/mrfan6/Demo/blob/main/Analysis.md
CVE: CVE-2024-40634
Published: 2024-07-22
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This report details a security vulnerability in Argo CD, where an unauthenticated attacker can send a specially crafted large JSON payload to the /api/webhook endpoint, causing excessive memory allocation that leads to service disruption by triggering an Out Of Memory (OOM) kill. The issue poses a high risk to the availability of Argo CD deployments. This vulnerability is fixed in 2.11.6, 2.10.15, and 2.9.20.

CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/argoproj/argo-cd/commit/46c0c0b64deaab1ece70cb701030b76668ad0cdc; https://github.com/argoproj/argo-cd/commit/540e3a57b90eb3655db54793332fac86bcc38b36; https://github.com/argoproj/argo-cd/commit/d881ee78949e23160a0b280bb159e4d3d625a4df
CVE: CVE-2024-41130
Published: 2024-07-22
Description: llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability is fixed in b3427.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-476
References: https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c[PII_REDACTED]52; https://github.com/ggerganov/llama.cpp/security/advisories/GHSA-49q7-2jmh-92fp; https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c[PII_REDACTED]52
CVE: CVE-2024-37380
Published: 2024-07-22
Description: A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point.


Affected Products:
UniFi U6+ Access Point (Version 6.6.65 and earlier) 

 
Mitigation:
Update your UniFi U6+ Access Point to Version 6.6.74 or later.

CVSS Score: 5.3 (MEDIUM)
References: https://community.ui.com/releases/Security-Advisory-Bulletin-041-041/df92860f-0379-4002-be47-6819a25a73a1; https://community.ui.com/releases/Security-Advisory-Bulletin-041-041/df92860f-0379-4002-be47-6819a25a73a1
CVE: CVE-2024-38944
Published: 2024-07-22
Description: An issue in Intelight X-1L Traffic controller Maxtime v.1.9.6 allows a remote attacker to execute arbitrary code via the /cgi-bin/generateForm.cgi?formID=142 component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/LemonSec/6aaea8320187a38e1a398fa321f12303; https://gist.github.com/LemonSec/6aaea8320187a38e1a398fa321f12303
CVE: CVE-2024-40075
Published: 2024-07-22
Description: Laravel v11.x was discovered to contain an XML External Entity (XXE) vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-611
References: https://gitee.com/Q16G/laravel_bug/blob/master/laravelBug.md; https://gitee.com/Q16G/laravel_bug/blob/master/laravelBug.md
CVE: CVE-2024-41880
Published: 2024-07-22
Description: In veilid-core in Veilid before 0.3.4, the protocol's ping function can be misused in a way that decreases the effectiveness of safety and private routes.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://gitlab.com/veilid/veilid/-/issues/395; https://gitlab.com/veilid/veilid/-/issues/395
CVE: CVE-2024-34329
Published: 2024-07-22
Description: Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload.
CVSS Score: 8.4 (HIGH)
CWE: CWE-277
References: https://github.com/pamoutaf/CVE-2024-34329/blob/main/README.md; https://www.entrust.com/ja/contact/services/downloads/drivers; https://www.entrust.com/sites/default/files/documentation/productsupport/entrust-security-bulletin-e24-004.pdf
CVE: CVE-2024-39250
Published: 2024-07-22
Description: EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/efrann/CVE-2024-39250; https://github.com/efrann/CVE-2024-39250
CVE: CVE-2024-6121
Published: 2024-07-22
Description: An out-of-date version of Redis shipped with NI SystemLink Server is susceptible to multiple vulnerabilities, including CVE-2022-24834.  This affects NI SystemLink Server 2024 Q1 and prior versions.  It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.
CVSS Score: 7.8 (HIGH)
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/ni-systemlink-server-ships-out-of-date-redis-version.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/ni-systemlink-server-ships-out-of-date-redis-version.html
CVE: CVE-2024-6122
Published: 2024-07-22
Description: An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access.  This affects NI SystemLink Server 2024 Q1 and prior versions.  It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-default-directory-permissions-for-ni-systemlink-redis-service.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-default-directory-permissions-for-ni-systemlink-redis-service.html
CVE: CVE-2024-6638
Published: 2024-07-22
Description: An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop.  Successful exploitation requires an attacker to provide a user with a specially crafted TDMS file.  This vulnerability affects LabVIEW 2024 Q1 and prior versions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/integer-overflow-vulnerability-reading-tdms-files-in-labview.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/integer-overflow-vulnerability-reading-tdms-files-in-labview.html
CVE: CVE-2024-6675
Published: 2024-07-22
Description: A deserialization of untrusted data vulnerability exists in NI VeriStand that may result in remote code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted project file.  This vulnerability affects VeriStand 2024 Q2 and prior versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerability-in-ni-veristand-project-file.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerability-in-ni-veristand-project-file.html
CVE: CVE-2024-40502
Published: 2024-07-22
Description: SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btn_login_b_Click function of the Loginpage.aspx
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://itsourcecode.com/author/angeljudesuarez/; https://itsourcecode.com/free-projects/asp/hospital-management-system-project-in-asp-net-mvc-with-source-code/; https://packetstormsecurity.com/files/179583/Hospital-Management-System-Project-In-ASP.Net-MVC-1-SQL-Injection.html
CVE: CVE-2024-6791
Published: 2024-07-22
Description: A directory path traversal vulnerability exists when loading a vsmodel file in NI VeriStand that may result in remote code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted .vsmodel file.  This vulnerability affects VeriStand 2024 Q2 and prior versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/directory-path-traversal-vulnerability-in-ni-veristand-with-vsmodel-files.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/directory-path-traversal-vulnerability-in-ni-veristand-with-vsmodel-files.html
CVE: CVE-2024-6793
Published: 2024-07-22
Description: A deserialization of untrusted data vulnerability exists in NI VeriStand  DataLogging Server that may result in remote code execution.  Successful exploitation requires an attacker to send a specially crafted message.  These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.html
CVE: CVE-2024-6794
Published: 2024-07-22
Description: A deserialization of untrusted data vulnerability exists in NI VeriStand Waveform Streaming  Server that may result in remote code execution. Successful exploitation requires an attacker to send a specially crafted message. These vulnerabilities affect NI VeriStand 2024 Q2 and prior versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerabilities-in-ni-veristand.html
CVE: CVE-2024-6805
Published: 2024-07-22
Description: The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources.  These missing checks may result in information disclosure or remote code execution.  This affects NI VeriStand 2024 Q2 and prior versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/missing-authorization-checks-in-ni-veristand-gateway.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/missing-authorization-checks-in-ni-veristand-gateway.html
CVE: CVE-2024-6806
Published: 2024-07-22
Description: The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources.  These missing checks may result in remote code execution.  This affects NI VeriStand 2024 Q2 and prior versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-862
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/missing-authorization-checks-in-ni-veristand-gateway.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/missing-authorization-checks-in-ni-veristand-gateway.html
CVE: CVE-2024-6911
Published: 2024-07-22
Description: Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in PerkinElmer ProcessPlus.This issue affects ProcessPlus: through 1.11.6507.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: http://seclists.org/fulldisclosure/2024/Jul/13; https://cyberdanube.com/en/en-multiple-vulnerabilities-in-perten-processplus/; http://seclists.org/fulldisclosure/2024/Jul/13
CVE: CVE-2024-6912
Published: 2024-07-22
Description: Use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows allows an attacker to login remove on all prone installations.This issue affects ProcessPlus: through 1.11.6507.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://seclists.org/fulldisclosure/2024/Jul/13; https://cyberdanube.com/en/en-multiple-vulnerabilities-in-perten-processplus/; http://seclists.org/fulldisclosure/2024/Jul/13
CVE: CVE-2024-6913
Published: 2024-07-22
Description: Execution with unnecessary privileges in PerkinElmer ProcessPlus allows an attacker to spawn a remote shell on the windows system.This issue affects ProcessPlus: through 1.11.6507.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250
References: http://seclists.org/fulldisclosure/2024/Jul/13; https://cyberdanube.com/en/en-multiple-vulnerabilities-in-perten-processplus/; http://seclists.org/fulldisclosure/2024/Jul/13
CVE: CVE-2024-24507
Published: 2024-07-22
Description: Cross Site Scripting vulnerability in Act-On 2023 allows a remote attacker to execute arbitrary code via the newUser parameter in the login.jsp component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gist.github.com/Xandsz/2b409acb81e846fc3478600f984785a1; https://gist.github.com/Xandsz/2b409acb81e846fc3478600f984785a1
CVE: CVE-2024-6717
Published: 2024-07-23
Description: HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2.
CVSS Score: 7.7 (HIGH)
CWE: CWE-610
References: https://discuss.hashicorp.com/t/hcsec-2024-15-nomad-vulnerable-to-allocation-directory-path-escape-through-archive-unpacking/68781; https://discuss.hashicorp.com/t/hcsec-2024-15-nomad-vulnerable-to-allocation-directory-path-escape-through-archive-unpacking/68781
CVE: CVE-2024-1575
Published: 2024-07-23
Description: The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-07-23-2024; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-07-23-2024
CVE: CVE-2024-6828
Published: 2024-07-23
Description: The Redux Framework plugin for WordPress is vulnerable to unauthenticated JSON file uploads due to missing authorization and capability checks on the Redux_Color_Scheme_Import function in versions 4.4.12 to 4.4.17. This makes it possible for unauthenticated attackers to upload JSON files, which can be used to conduct stored cross-site scripting attacks and, in some rare cases, when the wp_filesystem fails to initialize - to Remote Code Execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://core.trac.wordpress.org/browser/tags/6.5.4/src/wp-includes/class-wp-theme-json.php#L1690; https://plugins.trac.wordpress.org/browser/redux-framework/tags/4.4.17/redux-core/inc/classes/class-redux-filesystem.php#L614; https://plugins.trac.wordpress.org/browser/redux-framework/tags/4.4.17/redux-core/inc/classes/class-redux-helpers.php#L938
CVE: CVE-2024-6885
Published: 2024-07-23
Description: The MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maxi_remove_custom_image_size and maxi_add_custom_image_size functions in all versions up to, and including, 1.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/maxi-blocks/tags/1.9.2/core/class-maxi-image-crop.php#L100; https://plugins.trac.wordpress.org/browser/maxi-blocks/tags/1.9.2/core/class-maxi-image-crop.php#L42; https://plugins.trac.wordpress.org/browser/maxi-blocks/tags/1.9.2/plugin.php#L221
CVE: CVE-2024-4260
Published: 2024-07-23
Description: The Page Builder Gutenberg Blocks  WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://wpscan.com/vulnerability/69f33e20-8ff4-491c-8f37-a4eadd4ea8cf/; https://wpscan.com/vulnerability/69f33e20-8ff4-491c-8f37-a4eadd4ea8cf/
CVE: CVE-2024-6231
Published: 2024-07-23
Description: The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/75ad1d8f-edc3-4eb3-b4c0-73832c0a4ca0/; https://wpscan.com/vulnerability/75ad1d8f-edc3-4eb3-b4c0-73832c0a4ca0/
CVE: CVE-2024-6420
Published: 2024-07-23
Description: The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the hidden login page.
CVSS Score: 8.6 (HIGH)
References: https://wpscan.com/vulnerability/dfda6577-81aa-4397-a2d6-1d736f9ebd44/; https://wpscan.com/vulnerability/dfda6577-81aa-4397-a2d6-1d736f9ebd44/
CVE: CVE-2024-41012
Published: 2024-07-23
Description: In the Linux kernel, the following vulnerability has been resolved:

filelock: Remove locks reliably when fcntl/close race is detected

When fcntl_setlk() races with close(), it removes the created lock with
do_lock_file_wait().
However, LSMs can allow the first do_lock_file_wait() that created the lock
while denying the second do_lock_file_wait() that tries to remove the lock.
Separately, posix_lock_file() could also fail to
remove a lock due to GFP_KERNEL allocation failure (when splitting a range
in the middle).

After the bug has been triggered, use-after-free reads will occur in
lock_get_status() when userspace reads /proc/locks. This can likely be used
to read arbitrary kernel memory, but can't corrupt kernel memory.

Fix it by calling locks_remove_posix() instead, which is designed to
reliably get rid of POSIX locks associated with the given file and
files_struct and is also used by filp_flush().
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-416
References: https://git.kernel.org/stable/c/3cad1bc010416c6dd780643476bc59ed742436b9; https://git.kernel.org/stable/c/52c87ab18c76c14d7209646ccb3283b3f5d87b22; https://git.kernel.org/stable/c/5661b9c7ec189406c2dde00837aaa4672efb6240
CVE: CVE-2024-29070
Published: 2024-07-23
Description: On versions before 2.1.4, session is not invalidated after logout. When the user logged in successfully, the Backend service returns "Authorization" as the front-end authentication credential. "Authorization" can still initiate requests and access data even after logout.

Mitigation:

all users should upgrade to 2.1.4


CVSS Score: 9.1 (CRITICAL)
CWE: CWE-613
References: https://lists.apache.org/thread/zslblrz1l0n9t67mqdv42yv75ncfn9zl; http://www.openwall.com/lists/oss-security/2024/07/22/4; https://lists.apache.org/thread/zslblrz1l0n9t67mqdv42yv75ncfn9zl
CVE: CVE-2024-7014
Published: 2024-07-23
Description: EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting 
 versions 10.14.4 and older.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android/; https://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android/
CVE: CVE-2024-34128
Published: 2024-07-23
Description: Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html; https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html
CVE: CVE-2024-41836
Published: 2024-07-23
Description: InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/indesign/apsb24-48.html; https://helpx.adobe.com/security/products/indesign/apsb24-48.html
CVE: CVE-2024-41839
Published: 2024-07-23
Description: Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could lead to a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitation of this issue requires user interaction.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html; https://helpx.adobe.com/security/products/experience-manager/apsb24-28.html
CVE: CVE-2024-4079
Published: 2024-07-23
Description: An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution.  Successful exploitation requires an attacker to provide a user with a specially crafted VI.  This vulnerability affects LabVIEW 2024 Q1 and prior versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/out-of-bounds-read-due-to-missing-bounds-check-in-labview.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/out-of-bounds-read-due-to-missing-bounds-check-in-labview.html
CVE: CVE-2024-4080
Published: 2024-07-23
Description: A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution.  Successful exploitation requires an attacker to provide a user with a specially crafted VI.  This vulnerability affects LabVIEW 2024 Q1 and prior versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-issues-due-to-improper-length-checks-in-labview.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-issues-due-to-improper-length-checks-in-labview.html