CVE-2024-46964

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

The com.video.downloader.all (aka All Video Downloader) application through 11.28 for Android allows an attacker to execute arbitrary JavaScript code via the com.video.downloader.all.StartActivity component.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Nov 11, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-469655.4The DS allvideo.downloader.browser (aka Fast Video Downloader: Browser) application through 1.6-RC1 for Android allows an attacker to execut CVE-2024-469668.1The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for Android allows an attacker to execute arbit CVE-2024-46975.4The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘heading_tag’ parameter in all ve CVE-2024-469706.1In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible CVE-2024-469717.8Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU.CVE-2024-469727.8Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.CVE-2024-469737.8Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.CVE-2024-469747.8Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers.CVE-2024-469757.9Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's v CVE-2024-469765.4Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is a CVE-2024-469776.5OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vul CVE-2024-469786.5XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible for any user knowing