CVE-2024-0242

Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings...

CVE-2024-0242

Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings...

CVE-2024-0242 Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub

Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings...

CVE-2024-0242 Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub

Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings...

CVE-2024-0242

CVE-2024-0242 affects Qolsys IQ Panel 4 and IQ4 Hub prior to firmware 4.4.2. The vulnerability could allow an unauthorized actor to access panel settings under certain conditions, exposing sensitive information (impact: high for confidentiality and integrity, per CVSS 3.1). Affected products: Qol...

Qolsys IQ Panel 4, IQ4 HUB

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION : Low attack complexity Vendor : Qolsys, Inc. Equipment : IQ Panel 4, IQ4 Hub Vulnerability : Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of this vulnerability could allow the panel...

PT-2024-1630 · Qolsys · Qolsys Iq4 Hub +1

Name of the Vulnerable Software and Affected Versions: Qolsys IQ Panel 4 versions prior to 4.4.2 Qolsys IQ4 Hub versions prior to 4.4.2 Description: The issue is related to insufficient protection of service data in the IQ Panel 4 and IQ4 Hub panel software, which could allow unauthorized access ...

CVE-2024-0242: Exposure of Sensitive Information to an Unauthorized Actor

Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings...

Qolsys IQ Panel 4 and Qolsys IQ4 Hub Security Vulnerabilities

The Qolsys IQ Panel 4 and Qolsys IQ4 Hub are both wireless smart home security system alarm panels from Qolsys. A security vulnerability exists in the Qolsys IQ Panel 4 and Qolsys IQ4 Hub that stems from allowing unauthorized access to settings...

Malware in hub-blockly

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

SUSE: Security Advisory (SUSE-SU-2024:0321-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-956 Malicious code in hub-blockly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a569a2ddf66ac93b021560bb8b3ef62f8c0a81db49d53de3ce5e1648b68de76f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hub-blockly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a569a2ddf66ac93b021560bb8b3ef62f8c0a81db49d53de3ce5e1648b68de76f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FeverWarn Privilege Escalation

The vulnerabilities of the microprogramming software for thermal scanning systems—FeverWarn ESP32, FeverWarn RaspberryPi, and the centralized data storage and management system FeverWarn DataHub RaspberryPi—are related to deficiencies in access control during the processing of Wi-Fi interfaces...

Important: Red Hat Enhancement Advisory: Release of AWS Load Balancer Operator 1.0.1 on OperatorHub

Release of AWS Load Balancer Operator 1.0.1 Release of OpenShift AWS Load Balancer Operator 1.0.1...

Intel Integrated Sensor Hub Driver Privilege Escalation

The vulnerability of the Intel Integrated Sensor Hub driver for NUC P14E Laptop Element notebooks is related to the default access settings. Exploiting this vulnerability can allow attackers to gain increased privileges...

Arbitrary Code Execution

llama-hub is vulnerable to Arbitrary Code Execution. The vulnerability is due to missing safeload configuration during YAML parsing. An attackers can execute arbitrary code by exploiting this vulnerability...

docsrag (>=0.1.3, <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (0.0.25)

llama-hub PYPI version 0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.3, =0.1.6 Source cves: CVE-2024-23730 Source advisory: OSV:GHSA-297X-2QF3-JRJ3...

docsrag (>=0.1.3, <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (0.0.25)

llama-hub PYPI version 0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.3, =0.1.6 Source cves: CVE-2024-23730 Source advisory: GHSA-297X-2QF3-JRJ3...

Unsafe yaml deserialization in llama-hub

The OpenAPI and ChatGPT plugin loaders in LlamaHub aka llama-hub before 0.0.67 allow attackers to execute arbitrary code because safeload is not used for YAML...