Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2024-11-24 CVE-2024-11233 Out-of-bounds Write vulnerability in PHP
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas.
network
low complexity
php CWE-787
8.2
2024-11-24 CVE-2024-11234 Injection vulnerability in PHP
In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.
network
low complexity
php CWE-74
7.2
2024-11-22 CVE-2024-11392 Deserialization of Untrusted Data vulnerability in Huggingface Transformers
Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability.
network
low complexity
huggingface CWE-502
8.8
2024-11-22 CVE-2024-11393 Deserialization of Untrusted Data vulnerability in Huggingface Transformers
Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.
network
low complexity
huggingface CWE-502
8.8
2024-11-22 CVE-2024-11394 Deserialization of Untrusted Data vulnerability in Huggingface Transformers
Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.
network
low complexity
huggingface CWE-502
8.8
2024-11-22 CVE-2024-6818 Unspecified vulnerability in Irfanview 4.66
IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
local
low complexity
irfanview
7.8
2024-11-22 CVE-2024-6819 Unspecified vulnerability in Irfanview 4.66
IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
local
low complexity
irfanview
7.8
2024-11-22 CVE-2024-6820 Unspecified vulnerability in Irfanview 4.66
IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
local
low complexity
irfanview
7.8
2024-11-22 CVE-2024-6821 Unspecified vulnerability in Irfanview 4.66
IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
local
low complexity
irfanview
7.8
2024-11-22 CVE-2024-6822 Unspecified vulnerability in Irfanview 4.66
IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
local
low complexity
irfanview
7.8