Security Vulnerabilities - CVEs Published In November 2024
Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command ('Command Injection'), Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in BG-TEK Informatics Security Technologies CoslatV3 allows Command Injection, Privilege Escalation.
This issue affects CoslatV3: through 3.1069.
NOTE: The vendor was contacted and it was learned that the product is not supported.
CVSS Score
9.2
EPSS Score
0.008
Published
2024-11-04
Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report.
CVSS Score
8.3
EPSS Score
0.019
Published
2024-11-04
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Command Injection.This issue affects Media LIbrary Assistant: from n/a through <= 3.19.
CVSS Score
9.1
EPSS Score
0.011
Published
2024-11-04
There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS). This allows Attackers to Write Arbitrary Files via Archive Extraction containing symbolic links. We recommend upgrading past commit f7ce9d7b6f9c6ecd72d0b0f16216b046e55e44dc
CVSS Score
5.9
EPSS Score
0.002
Published
2024-11-04
Memory corruption while processing GPU page table switch.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-11-04
Memory corruption during GNSS HAL process initialization.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-11-04
Memory corruption while handling session errors from firmware.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-11-04
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-11-04
Memory corruption while processing GPU commands.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-11-04
Memory corruption while processing voice packet with arbitrary data received from ADSP.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-11-04