PT-2024-6162 · Mediatek · Mediatek Wlan Driver

Name of the Vulnerable Software and Affected Versions: MediaTek WLAN driver affected versions not specified Description: The issue is related to insufficient input validation in the WLAN driver, which can lead to a possible out of bounds write. This could allow a remote attacker to escalate their...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability previously existed in PrestaShop Product Designer version 1.178.36, which stemmed...

PUB-A-314778564

In TBD of TBD, there is a possible Downgrade attack due to a missing null check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-308405635

In TBD of TBD, there is a possible cryptographic downgrade attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Projectworlds Visitor Management System SQL Injection Vulnerability

Projectworlds Visitor Management System is a visitor access management system. It implements self-service functionality for visitors. A SQL injection vulnerability exists in Projectworlds Visitor Management System v.1.0 that could allow a remote attacker to escalate privileges via the name...

CVE-2024-25723

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched...

Nagios XI Security Vulnerability

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R1.01, which stems from a vulnerability that allo...

The vulnerability of the deployment and management software for Azure Kubernetes Service Confidential Containers relates to deficiencies in access control, allowing attackers to escalate their privileges.

The vulnerability of the Azure Kubernetes Service Confidential Containers’ deployment and management software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the FactoryTalk service platform’s web interface, which allows attackers to escalate their privileges

The vulnerability of the FactoryTalk service platform’s web interface is related to errors in granting permissions during program execution. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Enhancesoft osTicket Cross-Site Scripting Vulnerability

Enhancesoft osTicket is an open-source ticketing system from Enhancesoft, USA. A cross-site scripting vulnerability exists in Enhancesoft osTicket version 1.18.0, which stems from a vulnerability that allows a remote attacker to elevate privileges via a carefully crafted support ticket...

The vulnerability of the Vinchin Backup & Recovery software for backup and restoration operations, related to the use of default user accounts, allows a perpetrator to escalate their privileges.

The vulnerability of the Vinchin Backup & Recovery software for backup and restoration is related to the use of default user accounts. Exploiting this vulnerability could allow a malicious actor to gain increased privileges from a remote location...

The vulnerability of QTS and QuTScloud network devices from QNAP operating systems stems from deficiencies in authentication procedures, allowing attackers to escalate their privileges.

The vulnerabilities of QTS and QuTScloud network devices from QNAP are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to gain increased privileges remotely...

The vulnerability of Microsoft Exchange Server’s mail server, related to the NTLM credentials leakage, allows attackers to escalate their privileges.

The vulnerability of Microsoft Exchange Server is related to the leakage of NTLM credentials due to unauthorized access to resources. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of MinIO object storage servers, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the MinIO object storage server is related to deficiencies in access control based on the UpdateServiceAccountAdminAction policy. Exploiting this vulnerability allows an attacker operating remotely to enhance their privileges...

The vulnerability of the ManageEngine ADSelfService Plus password reset software lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.

The vulnerability of the ManageEngine ADSelfService Plus password reset software lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain elevated privileges remotely...

CVE-2024-20007

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

CVE-2024-20009

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150...

Race condition

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

Out-of-bounds

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150...

CVE-2024-20009

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150...