CVSS: 8.4EPSS: 0%CPEs: 1EXPL: 0CVE-2023-21165
https://notcve.org/view.php?id=CVE-2023-21165
In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. • https://source.android.com/security/bulletin/2024-01-01 • CWE-416: Use After Free •
CVSS: 7.2EPSS: 0%CPEs: -EXPL: 0CVE-2024-25415
https://notcve.org/view.php?id=CVE-2024-25415
A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php. Una vulnerabilidad de ejecución remota de código (RCE) en /admin/define_language.php de CE Phoenix v1.0.8.20 permite a atacantes ejecutar código PHP de su elección inyectando un payload manipulado en el archivo english.php. • https://github.com/capture0x/Phoenix https://packetstormsecurity.com/files/175913/CE-Phoenix-1.0.8.20-Remote-Command-Execution.html https://vulners.com/zdt/1337DAY-ID-39172 https://www.exploit-db.com/exploits/51957 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.1EPSS: 0%CPEs: 17EXPL: 0CVE-2024-20720 – Command injection in data collector backup due to insufficient patching of CVE-2023-38208
https://notcve.org/view.php?id=CVE-2024-20720
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. • https://helpx.adobe.com/security/products/magento/apsb24-03.html • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2024-20726 – [TianfuCup] JP2K Image Parsing Out-Of-Bounds Write
https://notcve.org/view.php?id=CVE-2024-20726
Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. • https://helpx.adobe.com/security/products/acrobat/apsb24-07.html • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2024-20730 – TALOS-2023-1906 - Adobe Acrobat Reader Font CPAL integer overflow vulnerability
https://notcve.org/view.php?id=CVE-2024-20730
Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. • https://helpx.adobe.com/security/products/acrobat/apsb24-07.html https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1906 • CWE-190: Integer Overflow or Wraparound •