PT-2024-37387 · Unknown · Magbanua Beach Resort Online Reservation System

Name of the Vulnerable Software and Affected Versions: Magbanua Beach Resort Online Reservation System versions up to 1.0 Description: A critical issue affects some unknown functionality of the file controller.php. The manipulation of the image argument leads to unrestricted upload. The attack ma...

PT-2024-37391 · Unknown · Monbela Tourist Inn Online Reservation System

Name of the Vulnerable Software and Affected Versions: Monbela Tourist Inn Online Reservation System versions up to 1.0 Description: A critical vulnerability has been found in the Monbela Tourist Inn Online Reservation System, affecting an unknown function of the file controller.php. The...

The vulnerability of the pch_can_rx_normal() function in the Linux operating system’s CAN controller area network driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pchcanrxnormal function in the drivers/net/can/pchcan.c file of the Linux operating system’s CAN controller area network driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

RLSA-2024:2962 Moderate: virt:rhel and virt-devel:rhel security and enhancement update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

Path Traversal

org.jenkins-ci.plugins:report-info is vulnerable to Path Traversal. The vulnerability is due to lack of path validation in the workspace directory, allowing attackers with Item/Configure permission to access restricted files on the controller file system...

(Pwn2Own) Oracle VirtualBox OHCI USB Controller Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

The vulnerability of microprogrammed software in the programmable logic controller SIMATIC S7-200 SMART is related to the use of insufficiently random values, which allows a intruder to cause malfunctions during maintenance.

The vulnerability of microprogrammed software in the SIMATIC S7-200 SMART programmable logic controller is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker, operating remotely, to predict the IP address sequence numbers and trigger a...

The vulnerability of the QEMU hardware emulation software, related to the cycle with an unreachable exit condition, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulator is related to an infinite loop error in the emulation of the USB xHCI controller during the calculation of the TRB ring length. Exploiting this vulnerability can allow a hacker to cause a system failure...

CVE-2024-5557

CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause exposure of SNMP credentials when an attacker has access to the controller logs...

CVE-2024-5557

CVE-2024-5557 describes a CWE-532 log message disclosure in Schneider Electric SpaceLogic AS-P/AS-B where SNMP credentials can be exposed if an attacker has access to controller logs. The core issue is insertion of sensitive information into log files. Affected products are Schneider Electric Spa...

BIT-SUITECRM-2024-36411 SuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax displayView controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, guac, nuclei, py3-azure-identity, prometheus-operator, rook, trivy, flux-kustomize-controller, rekor, tkn, chezmoi, druid, cortex, fulcio, terragrunt, bank-vaults, opentelemetry-collector-contrib, airflow, tempo, cosign,...

Microsoft Windows Storage Backlink Vulnerability

Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Storage. The following products and editions are affected:Windows 10 Version 1809 for x64-based...

ROS-20240611-14

The QEMU hardware emulator vulnerability is related to an infinite loop error in QEMU emulation of a USB xHCI controller when calculating the length of the transfer request block TRB ring. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in th...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2024-36410 SuiteCRM authenticated SQL Injection in EmailUIAjax messages count controller

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax messages count controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

CVE-2024-36408 SuiteCRM authenticated SQL Injection in Alerts

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in the Alerts controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

CVE-2024-36408

CVE-2024-36408 affects SuiteCRM versions prior to 7.14.4 and 8.6.1, where poor input validation in the Alerts controller allows SQL injection. A fix is shipped in 7.14.4 and 8.6.1. CVSS metrics in the records indicate high/critical impact (base scores 8.8–9.6) with network attack vector and low p...

SuiteCRM Security Breach

SuiteCRM is a customer relationship management system from the SuiteCRM team. SuiteCRM has a security vulnerability that stems from incorrect input validation, which leads to an SQL injection vulnerability in the EmailUIAjax displayView controller...

SuiteCRM Security Breach

SuiteCRM is a customer relationship management system from the SuiteCRM team. SuiteCRM has a security vulnerability that stems from incorrect input validation, which leads to an SQL injection vulnerability in the EmailUIAjax message counting controller...