Mozilla Firefox ESR < 128.1

The version of Firefox ESR installed on the remote Windows host is prior to 128.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-35 advisory. - Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. CVE-2024-7528 -...

CVE-2023-40819

ID4Portais contains an HTML Injection vulnerability in versions prior to V.2022.837.002a, caused by the response returning an unsanitized message parameter. Affected product: ID4Portais. Root cause: unsanitized message parameter leading to HTML injection. Impact details are described across sourc...

PT-2024-29312 · Automation Anywhere · Automation Anywhere Automation 360

Name of the Vulnerable Software and Affected Versions: Automation Anywhere Automation 360 version 21094 Description: A CSV injection issue allows attackers to execute arbitrary code via a crafted payload. The payload is injected in the HTTP response from the client-side. Note that Automation...

eduAuthorities 1.0 SQL Injection

Titles: eduAuthorities-1.0 Multiple-SQLi Author: nu11secur1ty Date: 07/29/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/16137/online-student-management-system-php-free-download.html Reference: https://portswigger.net/web-security/sql-injection Description: The...

Important: freeradius

Issue Overview: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature...

Security Vulnerabilities fixed in Thunderbird 115.14 — Mozilla

Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a sandbox escape. Incomplete WebAssembly exception handing could have led to a use-after-free. Editor code failed to check an attribute value. This cou...

SUSE-SU-2024:2757-1 Security update for python-Twisted

This update for python-Twisted fixes the following issues: - CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order bsc1228549 - CVE-2024-41810: Fixed reflected XSS via HTML injection in redirect response bsc1228552...

CVE-2024-33026

Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...

CVE-2024-33014

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-21459

Information disclosure while handling beacon or probe response frame in STA...

CVE-2024-33026

CVE-2024-33026 is a WLAN/Qualcomm-related issue described as a transient DoS when parsing probe and association response frames, triggered when the received frame length is less than the maximum size of the timestamp. The CVE entry lists a base score of 7.5 (Network attack, Low complexity, No use...

CVE-2024-33026 Buffer Over-read in WLAN Host

Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp...

CVE-2024-33014 Buffer Over-read in WLAN Host

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33014

CVE-2024-33014 affects Qualcomm WLAN components; description: Transient Denial of Service occurs while parsing ESP Information Elements from beacon/probe response frames. CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, User interaction none; AvailabilityImpact: High). Connected ...

CVE-2024-33014 Buffer Over-read in WLAN Host

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-21459

CVE-2024-21459 impacts Qualcomm WLAN HOST circuitry (Qualcomm WLAN component) and is a information-disclosure flaw triggered by handling beacon or probe response frames in a Station (STA). The issue is categorized under WLAN with network attack vector and low complexity; CVSS metrics show confide...

CVE-2024-21459 Buffer Over-read in WLAN HOST

Information disclosure while handling beacon or probe response frame in STA...

Introducing the Rapid7 Command Platform

Integrated Security Operations for the Next-Generation Attack Surface As cybercrime and attack surfaces have sprawled, Rapid7 has been able to grow with our customers because we are relentlessly focused on relevance. The way we see it, relevance doesn’t mean aligning to market definitions of...

Enhancing Incident Response Readiness with Wazuh

Incident response is a structured approach to managing and addressing security breaches or cyber-attacks. Security teams must overcome challenges such as timely detection, comprehensive data collection, and coordinated actions to enhance readiness. Improving these areas ensures a swift and...

CVE-2024-7470

A vulnerability was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. It has been rated as critical. This issue affects the function sslvpnconfigmod of the file /vpn/vpntemplatestyle.php of the component Web Interface. The manipulation of the argument template/stylenum leads to os...