PT-2024-32927 · Dell · Dell Avamar

Name of the Vulnerable Software and Affected Versions: Dell Avamar versions 19.x Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This could allow a low-privileged attacker with remote access t...

PHPGurukul COVID 19 Testing Management System 安全漏洞

PHPGurukul COVID 19 Testing Management System is a COVID 19 testing management system from PHPGurukul Inc. A security vulnerability exists in version 1.0 of the PHPGurukul COVID 19 Testing Management System that stems from vulnerability to reflective cross-site scripting attacks...

Dell NetWorker 安全漏洞

Dell NetWorker is an application from Dell USA Inc. It provides forum discussion capabilities for Dell Inc. A security vulnerability exists in Dell NetWorker version 19.10, which stems from a key vulnerability in which authorization bypasses user control, which could easily lead to information...

PT-2024-29937 · Dell · Dell Networker

Name of the Vulnerable Software and Affected Versions: Dell NetWorker version 19.10 Description: The issue is an Authorization Bypass Through User-Controlled Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2024-21703

This Medium severity Security Misconfiguration vulnerability was introduced in version 8.8.1 of Confluence Data Center and Server for Windows installations. This Security Misconfiguration vulnerability, with a CVSS Score of 6.4 allows an authenticated attacker of the Windows host to read sensitiv...

CVE-2024-53635

A Reflected Cross Site Scripting XSS vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter...

CVE-2024-49512

InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

PT-2024-8786 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID18.5.2 through ID19.5 Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are...

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

CVE-2024-51661

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in David Lingren Media Library Assistant allows Command Injection.This issue affects Media Library Assistant: from n/a through 3.19...

PT-2024-9220 · Mediatek +1 · Mediatek Microchips +1

Name of the Vulnerable Software and Affected Versions: MediaTek microchip software affected versions not specified Android versions 12.0 through 15.0 openWRT versions 19.07 through 23.05 Yocto version 4.0 RDK-B versions 22Q3 through 24Q1 Description: The issue is related to an out-of-bounds write...

Drupal Smartling Connector module < 7.x-4.19,< 7.x-3.8 - Unauthenticated Open Redirection vulnerability

Unauthenticated Open Redirection vulnerability discovered by Pierre Rudloff in WordPress Module Smartling Connector versions 7.x-4.19,7.x-3.8...

PT-2024-9867 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID19.5, ID18.5.4 and earlier Description: The issue is related to an out-of-bounds read vulnerability. This could allow an attacker to bypass mitigations such as ASLR and disclose sensitive memory. Exploitation of th...

CLSA-2024-1728581726 linux-firmware: Fix of CVE-2023-31315

Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10ver:0x0A00107A, cpuid:0x00A10F12ver:0x0A101248, cpuid:0x00AA0F02ver:0x0AA00215, cpuid:0x00A00F12ver:0x0A001238, cpuid:0x00A10F11ver:0x0A101148, cpuid:0x00A00F11ver:0x0A0011D5; - Update AMD CPU microcode for processor family 0x17:...

Microsoft Windows Mobile Broadband Driver 缓冲区错误漏洞

The Microsoft Windows Mobile Broadband Driver is a driver from Microsoft Corporation USA that allows the Windows operating system to communicate with mobile broadband devices. A buffer error vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker could exploit this...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information due to the storage of user credentials in an unencrypted format in the LocalStorage of a web browser. Remediation Upgrade openc3 to version 5.19.0 or higher. References - GitHub Commit Credit:...

PYSEC-2024-100

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login functionality contains a reflected cross-site scripting XSS vulnerability. This vulnerability is fixed in 5.19.0. Note: This CVE only affects Open Source Edition, and...

OpenC3 COSMOS 安全漏洞

OpenC3 COSMOS is an OpenC3 open source application. A security vulnerability exists in OpenC3 COSMOS versions prior to 5.19.0, which originates from storing user passwords in an unencrypted form in the Web browser's LocalStorage...

PT-2024-32312 · Openc3 · Openc3 Cosmos

Name of the Vulnerable Software and Affected Versions: OpenC3 COSMOS versions prior to 5.19.0 Description: A path traversal vulnerability inside of LocalMode's open local file method allows an authenticated user with adequate permissions to download any .txt via the ScreensControllershow on the w...