PT-2024-13764 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows a local attacker to cause apps to crash through type confusion. Recommendations: For OpenHarmony versions prior to 3.2.4, update to a version newer than 3.2.4 to resolve the...

PT-2024-19077 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows a local attacker to cause a sensitive information leak through insecure storage. A local attacker can exploit this to gain access to sensitive information. Recommendations: For...

PT-2024-12049 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows a local attacker to cause an information leak through an out-of-bounds read. Recommendations: For OpenHarmony versions prior to 3.2.4, update to a version newer than 3.2.4 to...

OpenHarmony Security Vulnerabilities

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony v3.2.4 and earlier versions, which originated from a vulnerability that allows a local attacker to cause an informatio...

CVE-2024-23807

The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via...

VitalPBX Security Breach

VitalPBX is an Asterisk-based unified communications PBX system. A security vulnerability exists in VitalPBX version v.3.2.4-5 that originates from a vulnerability that allows an attacker to execute arbitrary code via a crafted payload...

phpMyFAQ Security Vulnerabilities

phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ version 3.2.4, which stems from an insecure fallback of a filename in phpMyFAQphpmyfaqadminattachments.php that could result in allowing JavaScript...

CVE-2023-49118

in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read...

CVE-2023-43756

OpenHarmony prior to and including v3.2.4 is affected by a local information-leak due to an out-of-bounds read in the Dsoftbus component. The CVE entry documents OpenHarmony v3.2.4 and earlier as vulnerable, with exploitation requiring local access and resulting in confidentiality impact. Remedia...

OpenHarmony Buffer Error Vulnerability

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony v3.2.4 and earlier versions, which stems from an out-of-bounds read problem that could lead to information disclosure...

OpenHarmony Buffer Error Vulnerability

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony v3.2.4 and earlier versions, which originates from an out-of-bounds write to execute arbitrary code...

PT-2024-13280 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows an adjacent attacker to execute arbitrary code through an out-of-bounds write. Recommendations: For OpenHarmony versions prior to 3.2.4, update to a version newer than 3.2.4 to...

PT-2024-13681 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows a local attacker to cause an information leak through an out-of-bounds read. Recommendations: For OpenHarmony versions prior to 3.2.4, update to a version newer than 3.2.4 to...

PT-2024-1831 · Vitalpbx · Vitalpbx

Name of the Vulnerable Software and Affected Versions: VitalPBX versions 3.2.4 through 3.2.5 Description: The issue is related to insufficient protection of service data when processing a script from the /var/lib/vitalpbx directory, allowing an attacker to execute arbitrary code via a crafted...

Cross site scripting

Avo is a framework to create admin panels for Ruby on Rails apps. A stored cross-site scripting XSS vulnerability was found in the keyvalue field of Avo v3.2.3 and v2.46.0. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the victim's browser. The value of the...

IBM Financial Transaction Manager for SWIFT Services Security Vulnerability

IBM Financial Transaction Manager for SWIFT Services is a financial transaction manager product from International Business Machines IBM. The product is primarily used for monitoring, tracking and reporting financial payments and transactions. A security vulnerability exists in IBM Financial...

Debian dla-3691 : spip - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3691 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3691-1 [email protected] https://www.debian.org/lts/security/...

GHSA-6X49-W35H-WQRJ Bypass serialize checks in Apache Dubbo

A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 through 3.1.10, from 3.2.0 through 3.2.4. Users are recommended to upgrade to the latest version, which fixes the issue...

CVE-2023-41804

Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4...

CVE-2023-48860

TOTOLINK N300RT version 3.2.4-B20180730.0906 has a post-authentication RCE due to incorrect access control, allows attackers can bypass front-end security restrictions and execute arbitrary code...