OSV-2024-679 Heap-buffer-overflow in readImage4v2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70554 Crash type: Heap-buffer-overflow WRITE 1 Crash state: readImage4v2 PCXHandler::read kimgiofuzzer.cc...

Apache Arrow Rust Object Store Log Message Disclosure Vulnerability

Apache Arrow is a cross-language development platform for in-memory data processing from the U.S. Apache Apache Foundation. The platform supports programming languages such as C, C++, C, Go and Java, and provides features such as inter-process communication. A log message disclosure vulnerability...

The vulnerability of the unzip method in Toshiba e-STUDIO microprogrammed multifunctional devices allows a perpetrator to execute arbitrary codes, create new files, or overwrite existing ones.

The vulnerability of the unzip method in Toshiba e-STUDIO microprogrammed devices is related to errors in processing the relative path to the catalog. Exploiting this vulnerability allows an attacker to execute arbitrary code, create new files, or overwrite existing ones...

CVE-2024-40767

In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced...

ROS-20240723-05

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to an insecure privilege management vulnerability. insecure privilege management. Exploitation of the vulnerability could allow an attacker to escalate their privileges A vulnerability in the...

CVE-2024-40767

In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced...

Apache RocketMQ Information Disclosure Vulnerability

Apache RocketMQ is the United States Apache Apache Foundation of a lightweight data processing platform and messaging engine. An information disclosure vulnerability exists in Apache RocketMQ, which can be exploited by an attacker to obtain an administrator's account and password via a specific...

The vulnerability of the Permission Model component of the Node.js software platform, which allows a perpetrator to compromise data integrity

The vulnerability of the Permission Model component in the Node.js software platform is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

Security Bulletin: IBM Event Streams is vulnerable to a denial of service attack due to the Apache Kafka (CVE-2024-27309).

Summary IBM Event Streams is vulnerable to a denial of service attack due to the Apache Kafka. It is primarily used to build real-time streaming data pipelines and applications that adapt to the data streams. It combines messaging, storage, and stream processing to allow storage and analysis of...

The vulnerability of the web interface of the microprogrammed software for Netis MW5360 allows a hacker to execute arbitrary commands.

The vulnerability of the web interface of Netis MW5360 microprogrammed software routers lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands during the processing of the password parameter...

The vulnerability of the SCADA system MasterSCADA 4D, related to errors in processing input data, allows a intruder to trigger a service failure.

The vulnerability of the SCADA system MasterSCADA 4D is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the pre-processing processor Simcenter Femap and the file conversion tool set between different formats (PS/IGES Parasolid Translator) lies in the reading of data beyond the buffer boundary in memory. This allows an attacker to execute arbitrary code.

The vulnerability of the pre-processing processor Simcenter Femap and the file conversion tool set between different formats PS/IGES Parasolid Translator is related to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Squid vulnerability (USN-6907-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6907-1 advisory. Joshua Rogers discovered that Squid did not properly handle multi-byte characters during Edge Side Includes ESI...

The vulnerability of the Approvals component of the Oracle Purchasing software, which handles purchase orders, allows a hacker to gain read, modify, add, or delete access to data.

The vulnerability of the Approvals component in the Oracle Purchasing software for processing purchase orders involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain read, modify, add, or delete access to data...

Softing Secure Integration Server 1.22 Remote Code Execution Exploit

This Metasploit module chains two vulnerabilities to achieve authenticated remote code execution against Softing Secure Integration Server version 1.22. In CVE-2022-1373, the restore configuration feature is vulnerable to a directory traversal vulnerability when processing zip files. When using t...

VulnCheck KEV: CVE-2023-43795

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing Service WPS specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Server Side Request...

PT-2024-5125 · Sicam Egs +1 · Sicam Egs +4

Name of the Vulnerable Software and Affected Versions: CPCI85 Central Processing/Communication versions prior to V5.40 SICORE Base system versions prior to V1.4.0 SICAM CP-8031, CP-8050, SICAM EGS affected versions not specified Description: The issue is related to the lack of necessary...

CVE-2024-6941

A vulnerability, which was classified as problematic, has been found in ThinkSAAS 3.7.0. This issue affects some unknown processing of the file app/system/action/do.php. The manipulation of the argument sitetitle/sitesubtitle/sitekey/sitedesc/siteurl/siteemail/siteicp leads to cross site scriptin...

CVE-2024-6941

ThinkSAAS 3.7.0 is affected by a cross-site scripting vulnerability in the processing of app/system/action/do.php. The issue arises from manipulating arguments site_title, site_subtitle, site_key, site_desc, site_url, site_email, and site_icp, enabling potential remote exploitation. The PT-Securi...

Fedora 40 : tcpreplay (2024-ecd4cc8435)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ecd4cc8435 advisory. Announcing v4.5.1 This release contains contributions from a record number of new contributors. This is greatly appreciated since I am a team of one, and do...