Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada Inc. which provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.3.7.0 and prior versions, which stems from incorrect authorization of the permission...

PT-2024-17483 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2024.3.7.0 and earlier Description: The issue is related to incorrect authorization in the permission component, allowing an authenticated user to view the password history of an entry without having the necessary...

Release Information for Veeam Backup & Replication 12.3

Requirements You can check the installed build number in the Veeam Backup & Replication Console's Main Menu ≡ under Help About. Release Information 12.3.2.4854 2026-06-08 Security Vulnerabilities CVE-2026-44963 | Severity: Critical 9.4 A vulnerability allowing remote code execution RCE on the...

CVE-2024-36620

A flaw was found in Moby. This vulnerability allows an attacker to cause a NULL pointer dereference, potentially leading to a denial of service via improper handling of specific requests in the image history functionality...

NULL Pointer Dereference on moby image history

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

AZL-53828 CVE-2024-36620 affecting package moby-engine for versions less than 25.0.3-9

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

OESA-2024-2492 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump history to record instructions that performed register spill/fi...

CVE-2024-36620

moby v25.0.0 - v26.0.2 is vulnerable to NULL Pointer Dereference via daemon/images/imagehistory.go...

CVE-2024-53507

A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems...

CVE-2024-52951

Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History...

SUSE CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox 133 and Thunderbird 133...

CVE-2024-52951

Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History...

CVE-2024-52951

CVE-2024-52951 describes a stored cross-site scripting (XSS) vulnerability in Omada Identity’s Access Request History prior to version 15 update 1. An authenticated attacker can trigger arbitrary JavaScript execution in a victim’s browser by sending a specially crafted link or by viewing a manipu...

PT-2024-35498 · Omada · Omada Identity

Name of the Vulnerable Software and Affected Versions: Omada Identity versions prior to 15 update 1 Description: The issue allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History. This is...

Omada Identity 跨站脚本漏洞

Omada Identity is an identity governance solution from Omada Identity. Omada Identity suffers from a cross-site scripting vulnerability that stems from the presence of a stored cross-site scripting vulnerability that allows an attacker to execute arbitrary code in a victim's browser via a special...

CVE-2024-52951

Stored Cross-Site Scripting in the Access Request History in Omada Identity before version 15 update 1 allows an authenticated attacker to execute arbitrary code in the browser of a victim via a specially crafted link or by viewing a manipulated Access Request History...

CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox 133 and Thunderbird 133...

UBUNTU-CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox 133 and Thunderbird 133...

Exploit for Deserialization of Untrusted Data in Alibaba Fastjson

CVE-2022-25845-In-Spring !Languagehttps://img.shields.io/b...

PT-2024-9962

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 133 Thunderbird versions prior to 133 Description: The issue is related to the Private Browsing Mode in Mozilla Firefox and Thunderbird on Android operating systems. It involves the potential for sensitive...