CVE-2024-40408

CVE-2024-40408 affects Cybele Software Thinfinity Workspace prior to v7.0.2.113, with an access control flaw in the Create Profile section that allows an attacker to create arbitrary user profiles with elevated privileges. The issue is due to improper access control on profile creation. Impact is...

CVE-2024-43639

creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113471740875187261 2024-11-13 09:23:51+00:00| seen|...

Hitachi Energy TRO600

RISK EVALUATION Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive...

CVE-2024-50217

creationtimestamp| type| source ---|---|--- 2024-11-09 10:34:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113452546160295795 2024-11-10 08:36:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113457742729180129 2025-04-10 13:35:26+00:00| seen|...

[SECURITY] Fedora 40 Update: php-tcpdf-6.7.7-1.fc40

PHP class for generating PDF documents. no external libraries are required for the basic functions; all standard page formats, custom page formats, custom margins and units of measure; UTF-8 Unicode and Right-To-Left languages; TrueTypeUnicode, OpenTypeUnicode, TrueType, OpenType, Type1 and CID-0...

CVE-2024-49402

Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...

CVE-2024-49407

Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles...

CVE-2024-34674

Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...

CVE-2024-34674

Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...

CVE-2024-49402

Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...

CVE-2024-49402

The CVE-2024-49402 entry concerns Samsung Dressroom. Affected software: Dressroom prior to SMR Nov-2024 Release 1. Root cause: improper input validation that enables a physical attacker to access data across multiple user profiles. Impact: cross-profile data exposure on vulnerable devices; CVSS m...

CVE-2024-49402

Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...

CVE-2024-34674

Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...

CVE-2024-34674

Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from Contacts contains an improper...

PT-2024-26095 · Contacts · Contacts

Name of the Vulnerable Software and Affected Versions: Contacts versions prior to SMR Nov-2024 Release 1 Description: The issue is related to improper access control, allowing physical attackers to access data across multiple user profiles. Recommendations: For versions prior to SMR Nov-2024...

PT-2024-33513 · Dressroom · Dressroom

Name of the Vulnerable Software and Affected Versions: Dressroom versions prior to SMR Nov-2024 Release 1 Description: The issue is related to improper input validation, allowing physical attackers to access data across multiple user profiles. Recommendations: For versions prior to SMR Nov-2024...

RHEL 5 : Red Hat Certificate System 8 (RHSA-2017:2560)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2560 advisory. Red Hat Certificate System is a complete implementation of an enterprise software system designed to manage enterprise public key infrastructure PKI...

CVE-2024-30616

Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin users can manipulate sensitive profiles information, posing a significant risk to data integrity...

CVE-2024-48410

creationtimestamp| type| source ---|---|--- 2024-11-01 18:42:04+00:00| seen| https://t.me/cvedetector/9623 2025-05-05 18:10:06+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3logxohawqv2v 2025-05-05 18:59:19+00:00| seen|...