CVE-2024-5402

CVE-2024-5402 affects ABB Mint Workbench I, specifically versions 5866 through 5868. The issue is an unquoted search path or element vulnerability that lets a local attacker escalate privileges by placing an executable in the path of the affected service. The root cause is the unquoted path handl...

Various Supermicro products Security breaches

The SuperMicro X11DPH-T and others are a motherboard from SuperMicro, Inc. A security vulnerability exists in various Supermicro products, which originates from an arbitrary memory write vulnerability on the motherboard. The affected products are as follows: SuperMicro X11DPH-T, SuperMicro...

CVE-2024-36434

CVE-2024-36434 describes an SMM callout vulnerability in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards. The issue is located in the SMM callout component of the Supermicro BMC firmware, with a reported buffer overflow in memory. Affected BIOS firmware versions are prior to 4.4. Accord...

PT-2024-5265 · Supermicro · Supermicro X11Dph-Tq +1

Name of the Vulnerable Software and Affected Versions: Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4 Description: The issue is related to an arbitrary memory write vulnerability in the BIOS firmware of certain Supermicro motherboards. This vulnerability c...

CVE-2024-36434

An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...

Various Supermicro products Security breaches

The SuperMicro X11DPH-T, among others, is a motherboard from SuperMicro USA. A security vulnerability exists in various Supermicro products, which stems from an SMM labeling vulnerability on the motherboard. The affected products are as follows: the SuperMicro X11DPH-T, SuperMicro X11DPH-Tq, and...

CVE-2024-36433

An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...

Relating IntelliCache and In-memory Read Caching

Introduced in XenServer 5.6 SP1, IntelliCache is designed to reduce the volume of storage I/O hitting the network and the storage repository SR shared with other hosts. Introduced in XenServer 6.5, in-memory read-caching is designed to reduce the volume of storage I/O hitting an SR and reduce I/O...

SUSE-SU-2024:2463-1 Security update for squashfs

This update for squashfs fixes the following issues: - CVE-2015-4645,CVE-2015-4646: Multiple buffer overflows fixed in squashfs-tools bsc935380 - CVE-2021-40153: Fixed an issue where an attacker might have been able to write a file outside of destination bsc1189936 - CVE-2021-41072: Fixed an issu...

WordPress i-transform theme <= 3.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme i-transform versions = 3.0.9...

WordPress i-transform Theme <= 3.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software i-transform Type Theme Vulnerable versions = 3.0.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-38764 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID afcccf575710 Credits Dhabaleshwar Das Required...

WordPress i-amaze theme <= 1.3.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme i-amaze versions = 1.3.7...

CVE-2024-22387

External Control of Critical State Data CWE-642 in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated user to modify device I/O connections leading to unexpected behavior that in some circumstances could compromise site physical security controls. Gallagher...

CVE-2024-22387

External Control of Critical State Data CWE-642 in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated user to modify device I/O connections leading to unexpected behavior that in some circumstances could compromise site physical security controls. Gallagher...

CVE-2024-22387

CVE-2024-22387 affects Gallagher Controller 6000 and 7000 via the diagnostic web interface. An authenticated user can externally control critical state data to modify device I/O connections, causing unexpected behavior and potentially compromising site physical security controls. Affected version...

[SECURITY] Fedora 39 Update: squid-6.10-1.fc39

Squid is a high-performance proxy caching server for Web clients, supporting FTP and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups...

WordPress i-amaze Theme <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software i-amaze Type Theme Vulnerable versions = 1.3.7 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-38731 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b6666f2a8369 Credits Dhabaleshwar Das Required...

PT-2024-19380 · Gallagher · Gallagher Controller 6000 +1

Name of the Vulnerable Software and Affected Versions: Gallagher Controller 6000 and 7000 versions 8.60 and prior Gallagher Controller 6000 and 7000 versions 8.70 prior to vCR8.70.240520a Gallagher Controller 6000 and 7000 versions 8.80 prior to vCR8.80.240520a Gallagher Controller 6000 and 7000...

Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to a denial of service and bypassing security restrictions due to multiple vulnerabilities.

Summary IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by IBM i are vulnerable to a remote attacker causing availability impact CVE-2024-21085, denial of service CVE-2023-38264, and bypassing security restrictions CVE-2024-3933 as described in the vulnerability details...

IBM System Management for i 代码问题漏洞

IBM System Management for i is a management system from International Business Machines IBM. A code issue vulnerability exists in IBM System Management for i versions 7.2, 7.3, and 7.4, which can be exploited by an attacker to cause user-controlled code to run with administrator privileges...