PT-2024-30540 · Unknown · Calamares-Nixos-Extensions

Name of the Vulnerable Software and Affected Versions: calamares-nixos-extensions versions prior to 0.3.17 Description: The issue affects users who installed NixOS through the graphical installer using manual disk partitioning, where the system boots via legacy BIOS, some disk partitions are...

PT-2024-19900 · Intel · Intel Ethernet Network Controllers/Adapters E810 Series

Name of the Vulnerable Software and Affected Versions: Linux kernel mode driver for IntelR Ethernet Network Controllers and Adapters E810 Series versions prior to 28.3 Description: The issue is related to a protection mechanism failure in the Linux kernel mode driver, which may allow an...

Adobe Photoshop Resource Management Vulnerability

Adobe Photoshop is a suite of image processing software from the American company Audobee Adobe. The software is primarily used for processing images. A resource management error vulnerability exists in Adobe Photoshop versions 24.x prior to 24.7.3, and 25.x prior to 25.9.1, which stems from bein...

PT-2024-6975 · Intel · Intel Connectivity Performance Suite

Name of the Vulnerable Software and Affected Versions: Intel Connectivity Performance Suite versions prior to 2.0 Description: The issue is related to incorrect default permissions in the Intel Connectivity Performance Suite software installer. This could allow an authenticated user to potentiall...

AZL-47776 CVE-2024-43168 affecting package unbound for versions less than 1.19.1-2

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

PT-2024-13007 · Unknown +2 · Zoneminder +2

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.36.34 Description: The issue is related to a SQL injection vulnerability in the ZoneMinder application. Specifically, the watch.php file takes a few parameters in an SQL query without proper sanitization, making...

openHAB security vulnerabilities

openHAB is an open source home automation application from openHAB. A security vulnerability exists in openHAB versions prior to 4.2.1 that stems from multiple endpoints that do not require authentication. An attacker can exploit the vulnerability to obtain sensitive information...

PT-2024-38458 · WordPress · Atarim

Name of the Vulnerable Software and Affected Versions: Atarim plugin for WordPress versions prior to 4.0.3 Description: The issue allows authenticated attackers with Subscriber-level access and above to modify data due to a missing capability check on the process wpfeedback misc options function...

SUSE CVE-2024-7550

Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

VRCX security vulnerabilities

VRCX is a helper/companion application for VRChat from the VRCX team. A security vulnerability exists in versions of VRCX prior to 2024.03.23, which stems from the fact that the CefSharp browser with over-privileges and cross-site scripting via override notifications can be used in combination to...

CVE-2024-34634

Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory...

CVE-2024-34623

Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code with Samsung Notes privilege...

CVE-2024-34618

Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information...

PT-2024-26020 · Samsung · Samsunghealthservice

Name of the Vulnerable Software and Affected Versions: SamsungHealthService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in SamsungHealthService, allowing local attackers to bypass restrictions on starting services from the background...

PT-2024-26045 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in applying binary with path, which allows local attackers to potentially read memory. Recommendations: For versions prior to 4.4.21.62, upda...

PT-2024-26029 · Samsung · Galaxy Watch

Name of the Vulnerable Software and Affected Versions: Galaxy Watch versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to access sensitive information on the Galaxy Watch. This could potentially expose user data to...

DEBIAN-CVE-2024-7550

Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

WordPress WooCommerce Multiple Customer Addresses & Shipping plugin < 24.9 - Vulnerable ACF Pro plugin Embed vulnerability

Vulnerable ACF Pro plugin Embed vulnerability discovered by ? in WordPress Plugin WooCommerce Multiple Customer Addresses & Shipping versions 24.9...

HP Poly Clariti Manager devices security vulnerabilities

HP Poly Clariti Manager devices is a device management system from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Poly Clariti Manager devices version 10.10.2.2 and prior versions, which stems from an inability to properly clean up user input...

PT-2024-23222 · Privx · Privx

Name of the Vulnerable Software and Affected Versions: PrivX versions prior to 34.0 Description: The issue allows data exfiltration and denial of service via the REST API. Recommendations: For versions prior to 34.0, update to version 34.0 or later to resolve the issue. Alternatively, for earlier...