CVE-2024-38155 Security Center Broker Information Disclosure Vulnerability

...

[R1] Stand-alone Security Patch Available for Tenable Security Center versions 6.2.1, 6.3.0 and 6.4.0: SC-202408.1

R1 Stand-alone Security Patch Available for Tenable Security Center versions 6.2.1, 6.3.0 and 6.4.0: SC-202408.1 Arnie Cabral Tue, 08/13/2024 - 10:51 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components Apache, libcurl were...

Security Center Broker Information Disclosure Vulnerability

...

Description of the security update for Outlook 2016: August 13, 2024 (KB5002626)

None None...

Description of the security update for PowerPoint 2016: August 13, 2024 (KB5002586)

None None...

PT-2024-5595 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the Security Center Broker component of the Windows operating system, which can lead to information disclosure. This can allow an attacker to...

HPESBHF04692 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01073, Intel Xeon Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1670 Performance Storage - Prior to v2.2005-27-2024 HPE StoreEasy 1670 Storage - Prior to v2.2005-27-2024 HPE StoreEasy 1870 Performance Storage - Prior to...

Microsoft Windows Security Center 缓冲区错误漏洞

Microsoft Windows Security Center is a security center from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Security Center. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are...

ALSA-2024:5312 Moderate: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

Intel® Data Center GPU Max Series Advisory

Summary: A potential security vulnerability in some Intel® Data Center GPU Max Series 1100 and 1550 products may allow denial of service. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-24580 Description: Improper conditions...

ROS-20240812-06

A vulnerability in GLPI's asset management and data center software is related to the The introduction of a malicious link by an unauthenticated user. Exploitation of the vulnerability could allow an attacker acting remotely to conduct an XSS attack Vulnerability in GLPI's request, incident and...

ROS-20240812-03

The vulnerability in GLPI's asset and data center management software is related to the the injection of commands into a specific workflow that an agent would run with the privileges it uses privileges. Exploitation of the vulnerability could allow an attacker acting remotely to escalate its...

Atlassian Bitbucket < 8.9.13 / 8.19.2 Open Redirect

There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitbucket DC from 8.0.0 to 8.9.12 and 8.19.0 to 8.19.1 are affected by this vulnerability. It is patched in 8.9.13 and 8.19.2. This open redirect vulnerability allows an...

docs.tritondatacenter.com Cross Site Scripting vulnerability OBB-3954840

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

RCE (Remote Code Execution) in Bamboo Data Center and Server

This High severity RCE Remote Code Execution vulnerability CVE-2024-21689 was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.6, allows an authenticated attacker to execute...

Description of the security update for Office 2016: August 13, 2024 (KB5002625)

None None...

Non-Profit Blood Center OneBlood Recovering from Cripping Ransomware Attack

The non-profit blood donation service suffered a ransomware attack last week and has requested urgent and emergency blood…...

ForIP Administração PABX SQL注入漏洞

ForIP Administração PABX is a telephony system from ForIP. A SQL injection vulnerability exists in ForIP Administração PABX version 1.x. The vulnerability stems from the manipulation of the parameter user in the /authMonitCallcenter file of the Component Monitoring Center can lead to SQL injectio...

PT-2024-38370 · Forip Tecnologia · Forip Tecnologia Administração Pabx

Name of the Vulnerable Software and Affected Versions: ForIP Tecnologia Administração PABX versions 1.x Description: A critical issue affects some unknown functionality of the file /authMonitCallcenter of the component monitcallcenter. The manipulation of the user argument leads to SQL injection...

PT-2024-8394 · Unknown · Edna Chat Center

Name of the Vulnerable Software and Affected Versions: edna Chat Center affected versions not specified Description: The issue is related to improper access control in the edna Chat Center customer service system. Exploitation of this issue may allow a remote attacker to gain unauthorized access ...