CVE-2024-40640 Usage of non-constant time base64 decoder could lead to leakage of secret key material in vodozemac

vodozemac is an open source implementation of Olm and Megolm in pure Rust. Versions before 0.7.0 of vodozemac use a non-constant time base64 implementation for importing key material for Megolm group sessions and PkDecryption Ed25519 secret keys. This flaw might allow an attacker to infer some...

CGA-V937-F495-RXWX

Bulletin has no description...

CGA-R2QR-VH9V-529H

Bulletin has no description...

CGA-M569-G573-X65Q

Bulletin has no description...

CGA-92G3-88V2-RP77

Bulletin has no description...

CGA-72RV-77F5-42V9

Bulletin has no description...

CGA-6482-M2FR-9664

Bulletin has no description...

CGA-3JJQ-G42X-MM83

Bulletin has no description...

PT-2024-37829 · Unknown · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /Master.php?f=save student. The manipulation of the id argument leads to SQL...

PT-2024-5309 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions 22.2R1-EVO through 22.4R2-EVO Description: The issue is related to an Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on...

Installing Teams 2.x in an App Layering

Teams will not work properly in an image if it was installed in an App Layer using any version for App Layering prior to 2403.2...

CGA-X78V-M3WP-43H4

Bulletin has no description...

CGA-RR29-8VR5-44G8

Bulletin has no description...

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.

...

Conduit Security Vulnerabilities

Conduit is a simple, fast and reliable chat server from the individual developer Timo Kösters. A security vulnerability exists in Conduit v0.7.0 and earlier versions, which stems from a lack of authorization in the API, allowing elevation of privileges and running commands to reset passwords...

CVE-2024-3264

CVE-2024-3264 concerns Mia Technology’s Mia-Med Health Application. Multiple connected sources describe a vulnerability arising from the use of a broken or risky cryptographic algorithm that enables signature spoofing due to improper validation/authentication. The affected product is reported as ...

PT-2024-27768 · Envisionware · Envisionware Computer Access & Reservation Control Selfcheck +1

Name of the Vulnerable Software and Affected Versions: EnvisionWare Computer Access & Reservation Control SelfCheck version 1.0 Description: The issue allows unauthenticated attackers on the same network to perform a directory traversal. Recommendations: For EnvisionWare Computer Access &...

CVE-2024-35781

CVE-2024-35781 is a Word Balloon WordPress plugin vulnerability (authenticated) that allows PHP Local File Inclusion due to improper pathname limitation. Affected: Word Balloon up to and including version 4.21.1. Root cause: path traversal restricting access to restricted directories is insuffici...

CGA-R238-8H2V-2G64

Bulletin has no description...

SPA-Cart Security Breach

SPA-Cart is a shopping cart software from SPA-Cart, Inc. A security vulnerability exists in SPA-Cart version 1.9.0.6, which stems from the fact that incorrect manipulation of the parameter quantity can lead to the enforcement of a behavioral workflow...