824 matches found
CVE-2024-56433
shadow-utils aka shadow 4.4 through 4.17.0 establishes a default /etc/subuid behavior e.g., uid 100000 through 165535 for the first user account that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by...
shadow-utils 安全漏洞
shadow-utils is an open source package from shadow-maint. A security vulnerability exists in shadow-utils versions 4.4 through 4.17.0, which stems from the fact that the default /etc/subuid configuration may conflict with the UIDs of local network users, leading to a risk of account takeover...
Winmail Server 安全漏洞
Winmail Server is a server-side application used to provide mail services by China Huazhao Winmail Company. A security vulnerability exists in Winmail Server version 4.4, which stems from the inclusion of a cross-site scripting vulnerability...
Security Bulletin: Mutiple vulnerabilites in Python affect IBM Robotic Process Automation
Summary Mutiple vulnerabilites in Python affect IBM Robotic Process Automation. Python is used by IBM Robotic Process Automation as part of Watson NLP. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2019-11236 DESCRIPTION: Python urllib...
CVE-2024-49596
Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and arbitrary file deletion...
CVE-2024-49597
Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of Excessive Authentication Attempts vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...
PT-2024-8791 · Dell · Dell Wyse Management Suite
Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions WMS 4.4 and before Description: The issue is related to an authentication bypass vulnerability in the Dell Wyse Management Suite, which could allow a remote attacker to cause a denial of service. A...
Qnap QTS SQL Injection (CVE-2020-36195)
An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...
RHSA-2020:3247 Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2023:3491 Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update
Bulletin has no description...
RHSA-2021:0383 Red Hat Security Advisory: RHV-M (ovirt-engine) 4.4.z security, bug fix, enhancement upd[ovirt-4.4.4] 0-day
Bulletin has no description...
RHSA-2020:2737 Red Hat Security Advisory: OpenShift Container Platform 4.4.z jenkins-2-plugins security update
Bulletin has no description...
RHSA-2021:0381 Red Hat Security Advisory: RHV-M(ovirt-engine) 4.4.z security, bug fix, enhancement update [ovirt-4.4.4]
Bulletin has no description...
Android Open Source Platform (AOSP) Browser UXSS
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Android Open Source Platform AOSP Browser UXSS', 'Description' = %q This module exploits a Universal Cross-Site Scripting UXSS vulnerability...
PT-2024-36754 · B&R · B&R Aprol
Name of the Vulnerable Software and Affected Versions: B&R APROL versions R 4.2.-07P3 and R 4.4-00P3 Description: An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL may allow an authenticated local attacker to execute arbitrary code with elevated privileges...
PT-2024-8893 · Intel · Intel Ethernet Network Controllers/Adapters E810 Series
Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Network Controllers and Adapters E810 Series versions prior to 4.4 Description: The issue is related to a protection mechanism failure in the firmware of some Intel Ethernet Network Controllers and Adapters. This failure may...
CVE-2024-36433
An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...
PT-2024-5265 · Supermicro · Supermicro X11Dph-Tq +1
Name of the Vulnerable Software and Affected Versions: Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4 Description: The issue is related to an arbitrary memory write vulnerability in the BIOS firmware of certain Supermicro motherboards. This vulnerability c...
PT-2024-5267 · Supermicro · Supermicro X11Dph-Tq +2
Name of the Vulnerable Software and Affected Versions: Supermicro X11DPH-T versions prior to BIOS firmware 4.4 Supermicro X11DPH-Tq versions prior to BIOS firmware 4.4 Supermicro X11DPH-i versions prior to BIOS firmware 4.4 Description: A vulnerability was discovered in the SMM callout component ...