CVE-2024-1595

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82

insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published
Feb 29, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-15966.1The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded file (e.g. RTX file) in allCVE-2024-15979.8pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the defaCVE-2024-15987.8Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ CVE-2024-16009.3A Local File Inclusion (LFI) vulnerability exists in the parisneo/lollms-webui application, specifically within the `/personalities` route. CVE-2024-16019.8An SQL injection vulnerability exists in the `delete_discussion()` function of the parisneo/lollms-webui application, allowing an attacker tCVE-2024-16026.1parisneo/lollms-webui is vulnerable to stored Cross-Site Scripting (XSS) that leads to Remote Code Execution (RCE). The vulnerability arisesCVE-2024-16037.5paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.CVE-2024-16046.8Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users to reCVE-2024-16057.8BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries (DLL) from a directory that grants Write and ReadCVE-2024-16065.4Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for manipulation of generated web pages via CVE-2024-16087.5In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead to application inteCVE-2024-16098.7In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation.
CVE-2024-1595: High severity, CVSS 7.8 | Vulnix