systemd: buffer overrun in format_timespan() function

An off-by-one error flaw was found in systemd in the formattimespan function of time-util.c. This flaw allows an attacker to supply specific values for time and accuracy, leading to a buffer overrun in formattimespan, leading to a denial of service...

cups: heap buffer overflow may lead to DoS

A flaw was found in the Cups package. A buffer overflow vulnerability in the |formatlogline| function could allow remote attackers to cause a denial of service. Exploitation is only possible when the configuration file, cupsd.conf, has the value of loglevel set to DEBUG...

Exploit for Cross-site Scripting in Ritecms

🛡️ CVE-2024-28623 – XSS Vulnerability in RiteCMS v3.0.0 🔍...

Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated) Vulnerability

Exploit Title: Maxima Max Pro Power - BLE Traffic Replay Unauthenticated Exploit Author: Alok kumar email protected, Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.maximawatches.com Product Link: https://www.maximawatches.com/products/max-pro-power Firmware Version: v1.0 486A Tested...

openSUSE: Security Advisory for peazip (openSUSE-SU-2023:0071-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for binutils (SUSE-SU-2023:3825-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the SolarWinds Security Event Manager (SEM), previously known as SolarWinds Log & Event Manager, related to deserialization flaws, allows a hacker to execute arbitrary code.

The vulnerability of the Security Event Manager SEM, a software tool for monitoring network infrastructure formerly known as SolarWinds Log & Event Manager, is related to deficiencies in the deserialization mechanism when processing AMF Action Message Format data. Exploiting this vulnerability...

Maxima Max Pro Power - BLE Traffic Replay (Unauthenticated)

Exploit Title: Maxima Max Pro Power - BLE Traffic Replay Unauthenticated Date: 13-Nov-2023 Exploit Author: Alok kumar [email protected], Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.maximawatches.com Product Link: https://www.maximawatches.com/products/max-pro-power Firmware...

CVE-2024-25091

Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.211013 when using 'VirusChecker' or 'ThreatChecker' feature and RevoWorks Browser prior to 2.2.95 when using 'VirusChecker' or 'ThreatChecker' feature. If data containing malware is saved in a specific file format...

PT-2024-21831 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this issue, where the targ...

DICOM Connectivity Framework Security Vulnerability

The DICOM Connectivity Framework is an advanced, object-oriented collection of native software components that implements the DICOM protocol for medical imaging systems. A security vulnerability exists in DICOM Connectivity Framework prior to version v.2.7.6b, which stems from a directory travers...

Important: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

Important: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this updat...

SUSE CVE-2021-46943

In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix setfmt error handling If there in an error during a setfmt, do not overwrite the previous sizes with the invalid config. Without this patch, v4l2-compliance ends up allocating 4GiB of RAM and causin...

SUSE CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

CentOS 9 : dbus-1.12.20-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dbus-1.12.20-7.el9 build changelog. - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can...

The vulnerability of the IPSec VPN microprogramming software for network devices such as ZyXEL USG FLEX, USG FLEX 50(W)/USG20(W)-VPN, and ATP allows a hacker to execute arbitrary code.

The vulnerability of the IPSec VPN microprogramming software for ZyXEL USG FLEX, USG FLEX 50W/USG20W-VPN, and ATP is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a sequence of specially crafted...

The vulnerability of the Device Insight function in microprogrammed software for ZyXEL network devices, such as USG FLEX, USG FLEX 50(W)/USG20(W)-VPN, USG FLEX H, and ATP, allows a intruder to cause service interruptions.

The vulnerability of the Device Insight function in the microprogramming software for ZyXEL network devices, such as USG FLEX, USG FLEX 50W/USG20W-VPN, USG FLEX H, and ATP, is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a malicious actor to cause...

CentOS 9 : libinput-1.19.3-2.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libinput-1.19.3-2.el9 build changelog. - fix a format string vulnerability 2076816 CVE-2022-1215 Note that Nessus has not tested for this issue but has instead relied only on the...

libming 安全漏洞

libming is a Flash SWF output library written in C. It can be used as a library to export Flash SWF files to other languages. A memory leak vulnerability exists in the libming parseSWFFILLSTYLEARRAY function, which can be exploited by an attacker to cause a denial of service...