Latest CVE Feed
-
3.1
LOWCVE-2024-42194
An improper handling of insufficient permissions or privileges affects HCL BigFix Inventory. An attacker having access via a read-only account can possibly change certain configuration parameters by crafting a specific REST API call.... Read more
Affected Products :- Published: Dec. 17, 2024
- Modified: Dec. 17, 2024
-
0.0
NACVE-2024-53144
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4 ("Bluetooth: Always request for user confirmation for... Read more
Affected Products : linux_kernel- Published: Dec. 17, 2024
- Modified: Apr. 10, 2025
-
7.8
HIGHCVE-2024-12671
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context o... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-12670
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the c... Read more
- Published: Dec. 17, 2024
- Modified: Aug. 26, 2025
-
7.8
HIGHCVE-2024-12669
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the c... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-12200
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context o... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-12199
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context o... Read more
- Published: Dec. 17, 2024
- Modified: Aug. 26, 2025
-
7.8
HIGHCVE-2024-12198
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context o... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-12197
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context o... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-12194
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-12193
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context o... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-12192
A maliciously crafted DWF file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-12191
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context o... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-12179
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the c... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-12178
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.... Read more
- Published: Dec. 17, 2024
- Modified: May. 08, 2025
-
7.8
HIGHCVE-2024-11422
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context o... Read more
- Published: Dec. 17, 2024
- Modified: Aug. 26, 2025
-
8.0
HIGHCVE-2024-10476
Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information (PHI) and personally identifi... Read more
Affected Products :- Published: Dec. 17, 2024
- Modified: Dec. 17, 2024
-
6.5
MEDIUMCVE-2024-37607
A Buffer overflow vulnerability in D-Link DAP-2555 REVA_FIRMWARE_1.20 allows remote attackers to cause a Denial of Service (DoS) via a crafted HTTP request.... Read more
- Published: Dec. 17, 2024
- Modified: May. 21, 2025
-
6.5
MEDIUMCVE-2024-37606
A Stack overflow vulnerability in D-Link DCS-932L REVB_FIRMWARE_2.18.01 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.... Read more
- Published: Dec. 17, 2024
- Modified: May. 21, 2025
-
6.5
MEDIUMCVE-2024-37605
A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.... Read more
- Published: Dec. 17, 2024
- Modified: May. 21, 2025