WordPress plugin Dynamic Visibility for Elementor has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-54114

Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability...

SUSE CVE-2024-54131

The Kolide Agent aka: Launcher is the lightweight agent designed to work with Kolide's service. An implementation bug in the Kolide Agent known as launcher allows for local privilege escalation to the SYSTEM user on Windows 10 and 11. The bug was introduced in version 1.5.3 when launcher started...

Drupal Kernel Code Execution

The vulnerability of the Drupal CMS system’s kernel is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Important: Red Hat Security Advisory: python36:3.6 security update

An update for the python36:3.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

Drupal Kernel Code Execution

The vulnerability of the Drupal CMS system’s kernel is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the contentsecuritypolicy helper. An attacker can inject new directives into the CSP and bypass its protection mechanisms by crafting inputs that exploit the dynamic setting of CSP headers from untrusted...

2024-12 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5048652)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

Unauthorized Information Disclosure

moodle/moodle is vulnerable to Unauthorized Information Disclosure. The vulnerability is due to dynamic tables not enforcing capability checks, which allows users to retrieve information without proper permissions...

SonicWall SMA Network Interface Card Buffer Overflow

The vulnerability of SonicWall SMA 100 network firewall microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2024-10400

Name of the Vulnerable Software and Affected Versions Action Pack versions 5.2.0 through 7.0.8.6 Action Pack versions 7.0.8.7 through 7.1.5.0 Action Pack versions 7.1.5.1 through 7.2.2.0 Action Pack versions 7.2.2.1 through 8.0.0.0 Description The issue is related to the content security policy...

SAP Lifecycle Costing Client code issue vulnerabilities

SAP Lifecycle Costing Client is a product lifecycle costing software from SAP, Germany. A code issue vulnerability exists in SAP Lifecycle Costing Client versions prior to 4.7.1, which stems from the presence of a DLL substitution vulnerability that could lead to the theft of sensitive informatio...

PT-2024-9324 · Microsoft · Windows Task Scheduler +1

Name of the Vulnerable Software and Affected Versions: Windows Task Scheduler affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Task Scheduler. It is associated with a buffer overflow in dynamic memory. Exploitation of this...

PT-2024-9515

Name of the Vulnerable Software and Affected Versions Substance3D - Sampler versions 4.5.1 and earlier Description The issue is related to a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir...

APSB24-106 : Security update available for Adobe FrameMaker

Adobe has released a security update for Adobe FrameMaker. This update addresses a critical vulnerability with a single Dynamic Link Library DLL on the Windows platform. Successful exploitation could lead to arbitrary code execution...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes through the deserialization process. An attacker...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the deserialization process. An attacker can...

Autodesk Revit code issues and vulnerabilities

Autodesk Revit is a suite of building information modeling software from the American company Autodesk. A security vulnerability exists in Autodesk Revit that stems from the fact that if a maliciously crafted DLL file is placed in the same directory as an RVT file, Autodesk Revit may load the fil...

Synology Router Manager security vulnerability

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A security vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the DDNS logging feature, which is...