CVE-2024-13952

HIGH Year: 2024
CVSS v3 Score
8.4
High
Weakness Type
CWE-94
View all →

Vulnerability Description

Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

Related Vulnerabilities

CVE-2016-7102

HIGH
CVSS:8.4(High)

ownCloud Desktop before 2.2.3 allows local users to execute arbitrary code and possibly gain privileges via a Trojan library in a "special path" in the C: drive.

CWE-942016

CVE-2021-3661

HIGH
CVSS:8.4(High)

A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential v...

CWE-942021

CVE-2024-21760

HIGH
CVSS:8.4(High)

An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all ver...

CWE-942024

CVE-2024-23727

HIGH
CVSS:8.4(High)

The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.y...

CWE-942024

CVE-2024-28886

HIGH
CVSS:8.4(High)

OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.ust file), an arbitrary OS command may be executed.

CWE-942024

CVE-2024-33228

HIGH
CVSS:8.4(High)

An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL request...

CWE-942024