Juniper Junos OS Vulnerability (JSA75751)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75751 advisory. - An Improper Handling of Exceptional Conditions vulnerability in the Class of Service daemon cosd of Juniper Networks Junos OS on MX Series allows an authenticated,...

CVE-2024-29994

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability...

CVE-2024-29994

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability...

CVE-2024-29994 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

...

CVE-2024-29994

CVE-2024-29994 is Microsoft Windows SCSI Class System File Elevation of Privilege. Connected sources (NCSC advisory) list CVE-2024-29994 with CVSS v3.1 base 7.8 (high), Local attack vector, Low privileges required, no user interaction, and impact to confidentiality, integrity, and availability. T...

CVE-2024-4819

A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file adminclass.php. The manipulation of the argument type with the input 1 leads to improper authorization. It is possible to launch the atta...

Laundry Management System SQL注入漏洞

Laundry Management System is a laundry management system. A SQL injection vulnerability exists in Online Laundry Management System version 1.0, which originates from an SQL injection vulnerability in the id/deletecategory/deleteinv/deletelaundry/deletesupply/ The SQL injection vulnerability exist...

Laundry Management System 授权问题漏洞

Laundry Management System is a laundry management system. An authorization issue vulnerability exists in Online Laundry Management System version 1.0, which stems from an improper authorization vulnerability in the adminclass.php file...

Web-School ERP SQL注入漏洞

Web-School ERP is an application from Web-School India. An ERP application. A SQL injection vulnerability exists in Web-School ERP version 1.0, which originates from a SQL injection vulnerability in the groupsid, examname, classesid, esvoucherid, esclass, etc parameters on the...

CVE-2024-29994: Out-of-bounds Read

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability...

KLA67433 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...

Important: python3.9

Issue Overview: An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can r...

Amazon Linux AMI : python38 (ALAS-2024-1936)

The version of python38 installed on the remote host is prior to 3.8.5-1.11. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1936 advisory. An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.2, 3.11.8, 3.10.13, 3.9.18, and 3.8....

PT-2024-40770 · Git +1 · Trafficserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value". The crash state includes functions such as ink filepath merge, layout relative, and...

SonicWALL GMS Virtual Appliance ECMPolicy XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of SonicWALL GMS Virtual Appliance. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

The vulnerability of the Daemon Routing Protocols (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the Demon Routing Protocols Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states during packet forwarding based on the Class-of-Service CoS-based forwarding mechanism. Exploiting this...

MediaWiki UnlinkedWikibase Cross-site Scripting vulnerability

An issue was discovered in the UnlinkedWikibase extension in MediaWiki before 1.42.0. XSS can occur through an interface message. Error messages in the $err var are not escaped before being passed to Html::rawElement in the getError function in the Hooks class...

CVE-2024-34500: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the UnlinkedWikibase extension in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1. XSS can occur through an interface message. Error messages in the $err var are not escaped before being passed to Html::rawElement in the getError function in the...

CVE-2024-34500

The UnlinkedWikibase extension in MediaWiki is vulnerable to Cross-site Scripting (XSS) in versions prior to 1.39.6 , 1.40.x before 1.40.2 , and 1.41.x before 1.41.1 . The root cause is that error messages stored in the $err variable are not properly escaped before being passed to the Html::rawEl...

CVE-2024-34500

An issue was discovered in the UnlinkedWikibase extension in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1. XSS can occur through an interface message. Error messages in the $err var are not escaped before being passed to Html::rawElement in the getError function in the...