CVSS: 7.2EPSS: 0%CPEs: 7EXPL: 0CVE-2024-42501 – Authenticated Path Traversal Vulnerability Leads to a Remote Command Execution (RCE)
https://notcve.org/view.php?id=CVE-2024-42501
Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or install implants. • https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.8EPSS: 0%CPEs: -EXPL: 0CVE-2024-38812 – Heap-overflow vulnerability
https://notcve.org/view.php?id=CVE-2024-38812
A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution. • https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968 • CWE-122: Heap-based Buffer Overflow •
CVSS: 8.8EPSS: 0%CPEs: -EXPL: 0CVE-2024-8805 – BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-8805
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. •
CVSS: 9.8EPSS: 0%CPEs: -EXPL: 0CVE-2024-8806 – Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-8806
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. •
CVSS: 9.8EPSS: 0%CPEs: -EXPL: 0CVE-2024-8807 – Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-8807
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. •