1292 matches found
CVE-2024-20089
In wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08861558; Issue ID: MSV-1526...
CVE-2023-49198 Apache SeaTunnel Web: Arbitrary file read vulnerability
Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL allowLoadLocalInfile=true&allowUrlInLocalInfile=true&allowLoadLocalInfileInPath=/&maxAllowedPacket=655360 This issue affects Apache SeaTunnel: 1.0.0. Users...
PT-2024-8567 · Adobe · Indesign
Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions ID18.5.2 and earlier Adobe InDesign version ID19.4 Description: The issue is related to a heap-based buffer overflow in dynamic memory, which could allow an attacker to execute arbitrary code. Exploitation of this issu...
PT-2024-18813 · WordPress · Remote Content Shortcode
Name of the Vulnerable Software and Affected Versions: Remote Content Shortcode plugin for WordPress versions up to, and including, 1.5 Description: The issue allows authenticated attackers with contributor-level access and above to make web requests to arbitrary locations originating from the we...
SUSE CVE-2024-38528
nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. Non NTS-KE server configurations, such ...
PT-2024-12490 · Ibm · Ibm Security Qradar Edr
Name of the Vulnerable Software and Affected Versions: IBM Security QRadar EDR version 3.12 Description: A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. This issue allows for HTML...
CGA-R3C7-44CM-2PR4
Bulletin has no description...
CGA-GMX5-7VHC-85F8
Bulletin has no description...
CVE-2024-6387: regreSSHion RCE in OpenSSH Vulnerability
A signal handler race condition was found in OpenSSH's server sshd, where a client does not authenticate within LoginGraceTime seconds 120 by default, 600 in old OpenSSH versions, then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are n...
CVE-2024-20081
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08719602; Issue ID: MSV-1412...
CVE-2024-20080
In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08720039; Issue ID: MSV-1424...
Security Bulletin: IBM Resilient SOAR is vulnerable to command injection (CVE-2024-38319)
Summary It was possible for a privileged user to inject malicious commands that could be executed as another user. This issue has been addressed. Vulnerability Details CVEID:CVE-2024-38319 DESCRIPTION: IBM Security SOAR could allow an authenticated user to execute malicious code loaded from a...
CGA-25XR-Q758-V6Q8
Bulletin has no description...
CGA-XVM9-7MPM-M47W
Bulletin has no description...
CGA-VPGJ-8F5X-8QQ3
Bulletin has no description...
CGA-PFXP-4H34-FF67
Bulletin has no description...
CGA-JMC5-CM48-56PP
Bulletin has no description...
CGA-H27F-7F4M-7V88
Bulletin has no description...