10149 matches found
CVE-2024-8015 Telerik Report Server Insecure Type Resolution
In Progress Telerik Report Server versions prior to 2024 Q3 10.2.24.924, a remote code execution attack is possible through object injection via an insecure type resolution vulnerability...
CVE-2024-8015 Telerik Report Server Insecure Type Resolution
In Progress Telerik Report Server versions prior to 2024 Q3 10.2.24.924, a remote code execution attack is possible through object injection via an insecure type resolution vulnerability...
CVE-2024-8014 Telerik Reporting EntityDataSource Insecure Type Resolution
In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible through object injection via an insecure type resolution vulnerability...
CVE-2024-8014
Progress Telerik Reporting is affected by CVE-2024-8014 due to an insecure type resolution vulnerability that enables object injection and code execution. Affected versions are prior to 2024 Q3 (18.2.24.924). Remediation is to update to 2024 Q3 (18.2.24.924) or later (per the Nessus/Red Hat/CTTA ...
CVE-2024-8014 Telerik Reporting EntityDataSource Insecure Type Resolution
In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible through object injection via an insecure type resolution vulnerability...
CVE-2024-47663 staging: iio: frequency: ad9834: Validate frequency parameter value
In the Linux kernel, the following vulnerability has been resolved: staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834writefrequency clkgetrate can return 0. In such case ad9834calcfreqreg call will lead to division by zero. Checking 'if fout clkfreq / 2' doesn't protec...
CVE-2024-47662
The CVE-2024-47662 entry concerns the Linux kernel component drm/amd/display (DCN35 DMCUB diagnostics). The issue is that a diagnostic register read was removed to prevent triggering a security violation when DMCUB timeouts occur, blocking Z8 entry. The fix is to stop reading that register from t...
CVE-2024-47660
CVE-2024-47660 : Linux kernel fsnotify race causing lock contention. When removing watches on a directory with many dentries, __fsnotify_update_child_dentry_flags() races with __fsnotify_parent() on children, risking softlockup reports. The fix, per the bulletin, is to set PARENT_WATCHED only whe...
EulerOS 2.0 SP12 : python-dns (EulerOS-SA-2024-2538)
According to the versions of the python-dns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an...
EulerOS 2.0 SP12 : python-dns (EulerOS-SA-2024-2513)
According to the versions of the python-dns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an...
EulerOS 2.0 SP11 : python-dns (EulerOS-SA-2024-2590)
According to the versions of the python-dns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an...
EulerOS 2.0 SP11 : python-dns (EulerOS-SA-2024-2564)
According to the versions of the python-dns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an...
CVE-2024-8014: Use of Externally-Controlled Input to Select Classes or Code
In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible through object injection via an insecure type resolution vulnerability...
WordPress Disc Golf Manager Plugin <= 1.0.0 is vulnerable to PHP Object Injection
Software Disc Golf Manager Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-48026 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID ad0f79b4fc3a Credits LVT-tholv2k Required privilege...
CVE-2024-8015: Use of Externally-Controlled Input to Select Classes or Code
In Progress Telerik Report Server versions prior to 2024 Q3 10.2.24.924, a remote code execution attack is possible through object injection via an insecure type resolution vulnerability...
Huawei EulerOS: Security Advisory for python-dns (EulerOS-SA-2024-2538)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-dns (EulerOS-SA-2024-2513)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-43501: Improper Link Resolution Before File Access
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
PT-2024-7546
Name of the Vulnerable Software and Affected Versions Visual Studio Collector Service affected versions not specified Description The issue is related to an incorrect reference resolution before accessing a file, which can lead to a denial of service. An attacker could exploit this to cause a...