CVE-2024-21122

Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft component: Text Catalog. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HC...

CVE-2024-21122

The CVE-2024-21122 entry affects Oracle PeopleSoft 9.2, specifically the Text Catalog in PeopleSoft Enterprise HCM Shared Components. The Root Cause is insufficient input validation in the Text Catalog component, enabling a low-privileged attacker with network access via HTTP to compromise the co...

CVE-2024-21122: Incorrect Default Permissions

Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft component: Text Catalog. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HC...

RLSA-2024:4351 Low: virt:rhel and virt-devel:rhel security and bug fix update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

ROS-20240709-01

Vulnerability of the function UnicodeString::doAppend unistr.cpp of the International Components for Unicode library is related to integer overflow of the data structure. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to sensitive data, cause...

XenMobile 10 Logs Collection Guide

This article illustrates the log collection process on devices such as iOS, Android and Windows Phone for the various XenMobile components including - App Controller, NetScaler Gateway, XenMobile Device Manager and Citrix Secure Hub. For the latest information on logcollection process refer to...

decode-uri-component decoder Heap Buffer Overflow DoS

The vulnerability of the decodeComponents function in the decode-uri-component decoder is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Johnson Controls Illustra Pro Gen 4 Security Vulnerability

Johnson Controls Illustra Pro Gen 4 is a series of surveillance probes from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls Illustra Pro Gen 4 Camera SS016.05.03.01.0010 and prior versions, which stems from a dependency on vulnerable third-party components...

CVE-2024-26279

The wrapper extensions do not correctly validate inputs, leading to XSS vectors...

CVE-2024-26279

CVE-2024-26279 concerns Joomla! core wrapper extensions where inputs are not properly validated, enabling cross-site scripting (XSS) vectors. The NVD entry assigns a CVSSv3.1 base score of 6.1 (Medium) with Network attack vector, Low attack complexity, and user interaction required. Other connect...

CVE-2024-26279 [20240704] - Core - XSS in Wrapper extensions

The wrapper extensions do not correctly validate inputs, leading to XSS vectors...

HUMINT: Diving Deep into the Dark Web

Discover how cybercriminals behave in Dark Web forums- what services they buy and sell, what motivates them, and even how they scam each other. Clear Web vs. Deep Web vs. Dark Web Threat intelligence professionals divide the internet into three main components: Clear Web - Web assets that can be...

Joomla! Security Vulnerabilities

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! that stems from improper input handling and could lead to a cross-site scripting XSS vulnerability...

CVE-2024-39689 vulnerabilities

Vulnerabilities for packages: request-1276, kubeflow-katib, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, k8s-sidecar, reflex, kubeflow-pipelines-visualization-server, nvidia-nsight-compute-13.1, az, jwt-tool, nvidia-nsight-compute-13.2, py3-pipenv, checkov, dask-gateway, py3-certifi,...

CVE-2024-23998: Improper Neutralization of Input During Web Page Generation

goanother Another Redis Desktop Manager =1.6.1 is vulnerable to Cross Site Scripting XSS via src/components/Setting.vue...

CVE-2024-23998

goanother Another Redis Desktop Manager =1.6.1 is vulnerable to Cross Site Scripting XSS via src/components/Setting.vue...

USN-6877-1 libreoffice vulnerability

It was discovered that LibreOffice incorrectly performed TLS certificate verification when the LibreOfficeKit library is being used by third-party components. A remote attacker could possibly use this issue to obtain sensitive information...

USN-6871-1: Linux kernel (HWE) vulnerabilities

It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. A malicious person can exploit the vulnerabilities to grant themselves elevated privileges on the device to execute arbitrary code, possibly with system privileges and gain access to sensitive data. Successful abuse requires the malicious party to tric...

@amoy/animate (>=0.1.0, <=0.1.8), @amoy/query (>=0.1.1, <=0.4.3) +4 more potentially affected by CVE-2024-38994 via @amoy/common (1.0.10)

@amoy/common NPM version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @amoy/common and may be impacted: - @amoy/animate =0.1.0, =0.1.1, =1.0.0, =0.1.0, =1.0.1, =1.0.42 - react-webgl.js 0.0.1 Source cves: CVE-2024-38994 Source advisory:...