PT-2024-21062 · Sap · Sap Netweaver Wsrm

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver WSRM version 7.50 Description: Under certain conditions, SAP NetWeaver WSRM allows an attacker to access information that would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and...

WordPress plugin Paid Memberships Pro security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

The vulnerability of QTS, QuTS hero, and QuTScloud network devices from Qnap operating systems arises from incorrect path name restrictions for access-controlled catalogs. This allows attackers to exploit the vulnerabilities to disclose protected information.

The vulnerability of QTS, QuTS Hero, and QuTScloud network devices from QNAP operating systems is related to incorrect path name restrictions in the restricted access catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the sii902x_init function in Linux operating systems allows a hacker to disclose sensitive information or cause system failures.

The vulnerability of the sii902xinit function in Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause system failures...

PT-2024-22341 · Ngrinder · Ngrinder

Name of the Vulnerable Software and Affected Versions: nGrinder versions prior to 3.5.9 Description: The issue is related to a lack of access control, allowing an attacker to create or update webhook configuration. This could lead to information disclosure and limited Server-Side Request Forgery...

PT-2024-2617 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 visionOS versions prior to 1.1 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 iOS versions prior to 16.7.6 iPadOS versions prior to 16.7.6 tvOS versions prior to 17....

CVE-2024-28173

In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosed...

edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

A security weakness was identified in EDK2, the open-source reference implementation of the UEFI specification, revealing a buffer overflow vulnerability. This vulnerability enables an unauthorized attacker within proximity on the network to transmit a specifically crafted DHCPv6 Advertise messag...

edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

A security weakness was identified in EDK2, the open-source reference implementation of the UEFI specification, revealing a buffer overflow vulnerability. This vulnerability enables an unauthorized attacker within proximity on the network to transmit a specifically crafted DHCPv6 Advertise messag...

edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message

A security weakness was identified in EDK2, the open-source reference implementation of the UEFI specification, revealing a buffer overflow vulnerability. This vulnerability enables an unauthorized attacker within proximity on the network to transmit a specifically crafted DHCPv6 Advertise messag...

PT-2024-2048 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE AUTH negotiation process. The scenarios in which disclosure...

HPESBNW04604 rev.2 - HPE Aruba ArubaOS, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary File Deletion; Remote: Arbitrary Code Execution, Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba SD-WAN Software and Gateways See vulnerability summary for details Aruba...

CVE-2024-20036

In vdec, there is a possible permission bypass due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08509508; Issue ID: ALPS08509508...

CVE-2023-47742

IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances. IBM X-Force ID: 27253...

PT-2024-21150 · Webbax · Super Newsletter

Name of the Vulnerable Software and Affected Versions: PrestaShop versions 1.4.21 and earlier Description: An issue was discovered in the Webbax "Super Newsletter" module, allowing local attackers to escalate privileges and obtain sensitive information. Recommendations: For PrestaShop versions...

PT-2024-18523 · Pq · Pq

Name of the Vulnerable Software and Affected Versions: pq affected versions not specified Description: The issue is related to an incorrect bounds check, leading to a possible out of bounds read. This could result in local information disclosure, requiring System execution privileges for...

CVE-2024-1453

In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose information or execute arbitrary code...

PT-2024-18058 · Unknown · Sante Dicom Viewer Pro

Name of the Vulnerable Software and Affected Versions: Sante DICOM Viewer Pro versions 14.0.3 and prior Description: A local attacker could disclose information or execute arbitrary code by opening a malicious DICOM file. Recommendations: For versions 14.0.3 and prior, avoid opening untrusted or...

Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin Buffer Error Vulnerability

Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin is a Zeek plugin from Zeek open source. A security vulnerability exists in Industrial Control Systems Network Protocol Parsers - Ethercat Zeek Plugin d78dda6 and prior versions, which stems from susceptibility to...

NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure

Description The NextMove Lite – Thank You Page for WooCommerce and Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugins for WordPress are vulnerable to unauthorized access of data due to a missing capability check on the downloadtoolssettings function in all versions up to, and...