CVE-2024-22217

A Server-Side Request Forgery SSRF vulnerability in Terminalfour before 8.3.19 allows authenticated users to use specific features to access internal services including sensitive information on the server that Terminalfour runs on...

CVE-2024-22217

Summary: CVE-2024-22217 is a SSRF vulnerability in Terminalfour prior to 8.3.19. Affected software: Terminalfour (Java-based CMS) versions before 8.3.19. Root cause / nature: Authenticated users can abuse specific features to trigger server-side requests that access internal services and potentia...

PT-2024-19281 · Unknown · Terminalfour

Name of the Vulnerable Software and Affected Versions: Terminalfour versions prior to 8.3.19 Description: A Server-Side Request Forgery SSRF issue allows authenticated users to access internal services, including sensitive information on the server that Terminalfour runs on, by utilizing specific...

SQL Injection Vulnerability in Enterprise Standardization Management System of R&S Standardization Technical Services (Shanghai) Co.

R&S Standardization Technical Services Shanghai Co. A SQL injection vulnerability exists in the Enterprise Standardization Management System of R&S Standardization Technical Services Shanghai Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2024-38138

Windows Deployment Services Remote Code Execution Vulnerability...

CVE-2024-38138

Windows Deployment Services Remote Code Execution Vulnerability...

CVE-2024-38138 Windows Deployment Services Remote Code Execution Vulnerability

...

CVE-2024-38138

Technical details (affected products/versions/root cause/impact/remediation) are not present in the provided documents. Monitor for updates from Microsoft and CVE databases for concrete details, fixes, and confirmed impact.

CVE-2024-38138 Windows Deployment Services Remote Code Execution Vulnerability

...

CVE-2024-37015

An issue was discovered in Ada Web Server 20.0. When configured to use SSL which is not the default setting, the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers...

CVE-2024-37015

An issue was discovered in Ada Web Server 20.0. When configured to use SSL which is not the default setting, the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers...

UBUNTU-CVE-2024-37015

An issue was discovered in Ada Web Server 20.0. When configured to use SSL which is not the default setting, the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers...

Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP5 security update

Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 5 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

httpd: Encoding problem in mod_proxy

A flaw was found in the modproxy module of httpd. Due to an encoding problem, specially crafted request URLs with incorrect encoding can be sent to backend services, potentially bypassing authentication...

June 11, 2024—KB5039225 (OS Build 10240.20680) - EXPIRED

None None...

June 11, 2024—Hotpatch KB5039330 (OS Build 20348.2522)

None None...

Ada Web Server 安全漏洞

Ada Web Server AWS is an AdaCore open source complete framework for developing web-based applications in Ada. A security vulnerability exists in Ada Web Server version 20.0 that stems from the fact that the SSL/TLS used to establish a connection to an external service is not properly hostname...

PT-2024-27243 · Unknown · Ada Web Server

Name of the Vulnerable Software and Affected Versions: Ada Web Server version 20.0 Description: An issue was discovered in Ada Web Server when configured to use SSL, which is not the default setting. The SSL/TLS used to establish connections to external services is done without proper hostname...

Microsoft Windows Deployment Services 资源管理错误漏洞

Microsoft Windows Deployment Services is a setup container for Microsoft Corporation's Windows Deployment Services, an updated and redesigned version of Remote Installation Services RIS, which can be used to set up new computers via network-based unattended installations. A resource management...

PT-2024-5707 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue is related to a use-after-free memory vulnerability in Windows Deployment Services. This vulnerability can be exploited by a remote attacker to execute arbitra...