ROS-20241216-05

A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...

ROS-20241216-04

A vulnerability in the Single sign-on SSO authentication mechanism of the Zabbix universal monitoring system is related to authentication bypass via spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and elevate their...

CVE-2024-54099

File replacement vulnerability on some devices Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-54099

File replacement vulnerability on some devices Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...

CVE-2024-54098

CVE-2024-54098 is a Huawei EMUI/HarmonyOS system service module vulnerability described as a service logic error that can affect service integrity. The NVD entry lists CVSSv3.1 base score 7.5 (HIGH) with network attack vector but the Huawei CNA entry indicates local exploitation with low attack c...

CVE-2024-54097

Technical details about CVE-2024-54097 are not publicly available in the provided connected documents; no specific affected products, versions, root cause, or fixes are disclosed here. Monitor for official disclosures and updates.

PT-2024-36027 · Unknown · Mtp Module

Name of the Vulnerable Software and Affected Versions: MTP module affected versions not specified Description: The issue concerns improper access control in the MTP module. Successful exploitation may affect integrity and accuracy. Recommendations: At the moment, there is no information about a...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An improper access control vulnerability exists in Huawei EMUI and HarmonyOS MTP module, which can be exploited b...

CVE-2024-54198

In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call RFC request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be further exploited to completely...

CVE-2024-47581

SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted...

CVE-2024-32732

Under certain conditions SAP BusinessObjects Business Intelligence platform allows an attacker to access information which would otherwise be restricted.This has low impact on Confidentiality with no impact on Integrity and Availability of the application...

CVE-2024-32732 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform

Under certain conditions SAP BusinessObjects Business Intelligence platform allows an attacker to access information which would otherwise be restricted.This has low impact on Confidentiality with no impact on Integrity and Availability of the application...

Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to multiple vulnerabilities.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Tivoli Application Dependency Discovery Manager TADDM. Vulnerability Details CVEID:CVE-2024-21094 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote...

Juniper Junos OS Vulnerability (JSA88138)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88138 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an...

PT-2024-9484 · Advantech · Eki-6333Ac-2G +1

Name of the Vulnerable Software and Affected Versions: Advantech EKI-6333AC-2G versions 1.6.3 and earlier Advantech EKI-6333AC-2GD versions 1.6.3 and earlier Advantech EKI-6333AC-1GPO versions 1.2.1 and earlier Description: A security issue was discovered in the "lan apply" API of Advantech's...

edk2: Integer overflows in PeCoffLoaderRelocateImage

A flaw was found in the EDK2 package. This flaw allows an attacker to cause memory corruption due to an overflow via an adjacent network. This issue may lead to loss of confidentiality, integrity, and availability...

The vulnerability in the client and server implementations of the network file system (NFS) of the OpenBSD operating system allows a perpetrator to influence the confidentiality, integrity, and accessibility of data.

The vulnerability in the client and server implementations of the network file system NFS in the OpenBSD operating system is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of systems...

PT-2024-32666 · Sap · Sap

Name of the Vulnerable Software and Affected Versions: SAP software affected versions not specified Description: An attacker who gains local membership to the sapsys group could replace local files usually protected by privileged access. On successful exploitation, the attacker could cause high...

The vulnerability of the Frame Iterator component in the Firefox web browser, related to the execution of a loop with an unreachable exit condition, allows attackers to compromise data integrity.

The vulnerability of the Frame Iterator component in the Firefox web browser is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to compromise data integrity...

The vulnerability of the Firefox web browser’s exchange buffer component, related to reading data beyond the allowed limits of the buffer, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox web browser’s exchange buffer component is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...