CVE-2024-33394

CVSS v3 Score
5.9
Medium

Vulnerability Description

An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component.

CVSS:6.0(Medium)

The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format.

CWE-942021
CVSS:6.0(Medium)

A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege.

CWE-942022
CVSS:6.0(Medium)

Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

CWE-942023
CVSS:6.0(Medium)

In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux ke...

CWE-942023
CVSS:6.0(Medium)

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower T...

CWE-942024
CVSS:6.0(Medium)

A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine....

CWE-942024