Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-05 | CVE-2024-49522 | Out-of-bounds Write vulnerability in Adobe Substance 3D Painter Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. | 7.8 |
| 2024-11-05 | CVE-2024-9579 | Command Injection vulnerability in HP products A potential vulnerability was discovered in certain Poly video conferencing devices. | 7.5 |
| 2024-11-05 | CVE-2023-29117 | Improper Authentication vulnerability in Enelx Waybox PRO Firmware Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system. | 8.8 |
| 2024-11-05 | CVE-2023-29118 | SQL Injection vulnerability in Enelx Waybox PRO Firmware Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php. | 8.8 |
| 2024-11-05 | CVE-2023-29119 | SQL Injection vulnerability in Enelx Waybox PRO Firmware Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php. | 8.8 |
| 2024-11-05 | CVE-2023-29120 | OS Command Injection vulnerability in Enelx Waybox PRO Firmware Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system. | 8.8 |
| 2024-11-05 | CVE-2023-29121 | Unspecified vulnerability in Enelx Waybox PRO Firmware Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system. low complexity enelx | 8.8 |
| 2024-11-05 | CVE-2023-29125 | Out-of-bounds Write vulnerability in Enelx Waybox PRO Firmware A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. | 8.0 |
| 2024-11-05 | CVE-2023-29126 | Unspecified vulnerability in Enelx Waybox PRO Firmware The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication. low complexity enelx | 8.8 |
| 2024-11-05 | CVE-2024-10841 | SQL Injection vulnerability in Romadebrian Web-Sekolah 1.0 A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. | 8.0 |