USN-6747-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2024-3852, CVE-2024-3864,...

CVE-2024-28613

SQL Injection vulnerability in PHP Task Management System v.1.0 allows a remote attacker to escalate privileges and obtain sensitive information via the taskid parameter of the task-details.php, and edit-task.php component...

Multiple vulnerabilities in OMRON Sysmac Studio/CX-One and CX-Programmer

Overview OMRON Sysmac Studio/CX-One and CX-Programmer contain multiple vulnerabilities listed below. Out-of-bounds read CWE-125 - CVE-2024-31412 Free of pointer not at start of buffer CWE-761 - CVE-2024-31413 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with t...

Memory out-of-bounds read vulnerability in FreeRDP ExtractRunLengthRegular* function

FreeRDP is a freeware program that implements the Remote Desktop Protocol, which is mainly used to connect and manage Windows servers remotely. A memory out-of-bounds read vulnerability exists in FreeRDP versions prior to 3.5.1. The vulnerability arises because the program fails to properly handl...

MongoDB Compass 安全漏洞

MongoDB Compass is a free interactive tool from the US-based MongoDB Inc. for querying, optimizing, and analyzing MongoDB data. A security vulnerability exists in MongoDB Compass versions 1.35.0 through 1.40.5, which stems from the possibility that the application may accept and use insufficientl...

Vulnerability of the interleaved_decompress() function in the RDP client FreeRDP, allowing attackers to disclose protected information

The vulnerability of the interleaveddecompress function in the RDP client FreeRDP involves reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to memory-walking attacks. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the idxd component in the Linux operating system’s kernel allows a hacker to disclose confidential information.

The vulnerability of the idxd component in the Linux operating system’s kernel is related to the re-writing of the SWERR and OVERFLOW bits. Exploiting this vulnerability can allow an attacker to disclose confidential information...

The vulnerability of the DCH-compatible Thunderbolt driver, related to insufficient validation of input data, allows a hacker to exploit the system to disclose protected information.

The vulnerability of the DCH-compatible Thunderbolt driver is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the software’s user interface for running large language models (LLMs) like GPT NVIDIA ChatRTX for Windows allows a hacker to execute arbitrary code, cause service failures, or disclose sensitive information.

The vulnerability of the user interface of the software for running large language models LLM GPT NVIDIA ChatRTX for Windows exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, cause service...

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.

The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...

PT-2024-4522 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: Ffmpeg version v.n6.1-3-g466799d4f5 Description: The issue is related to a Buffer Overflow in the av samples set silence function, located in the libavutil/samplefmt.c component of the Ffmpeg library. This allows a local attacker to potential...

SolarWinds Platform 跨站脚本漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A cross-site scripting vulnerability exists in SolarWinds Platform that stems from allowing the execution of malicious scripts that can lead to data disclosure...

CVE-2024-30987

Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters...

Peplink Smart Reader 访问控制错误漏洞

Peplink Smart Reader is a smart reader from Peplink Inc. It is used for employee time and attendance. An access control error vulnerability exists in Peplink Smart Reader v1.2.0, which stems from the presence of an information disclosure vulnerability that could lead to the disclosure of sensitiv...

PT-2024-6877

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.4.5 Description A server-side request forgery issue exists in the validateAMCWSConnection function of Ivanti Avalanche. This flaw allows a remote, unauthenticated attacker to disclose sensitive information ...

IBM WebSphere Application Server 和 IBM WebSphere Application Server Liberty 代码问题漏洞

IBM WebSphere Application Server WAS and IBM WebSphere Application Server Liberty are both products of International Business Machines IBM.IBM WebSphere Application Server is an application server IBM WebSphere Application Server is an application server product. The product is a platform for...