Integer Overflow

gtkwave is vulnerable to an Integer Overflow. This vulnerability due to integer overflow via a specially crafted .fst file in the timetable tsecnitems functionality of the fstReaderIterBlocks2 module, allows a victim would need to open the malicious file...

Advisory ROSA-SA-2024-2390

Software: wireshark 4.0.10 OS: ROSA-CHROME packageevrstring: wireshark-4.0.10-1.src.rpm CVE-ID: CVE-2023-2858 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: NetScaler file analyzer failure in Wireshark allows a denial of service via a created capture file. CVE-STATUS: Fixed CVE-REV: To close, run the...

Exploit for Embedded Malicious Code in Tukaani Xz

Description Malicious code was discovered in the upstream tarb...

MAL-2024-1165 Malicious code in pt-api-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78627b7277f79f6b0febc6c2efde348085a7bf7363ebc2986ac5d3e2ce2329d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BizPrint < 4.5.4 - Printer Settings Update via CSRF

Description The plugin is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation within printer management. This makes it possible for unauthenticated attackers to modify printer settings and potentially perform other unauthorized actions via a forged request grante...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to insufficient input validation in the decompression functionality in vcdrecordermain, allowing attackers to execute arbitrary commands by crafting a specially crafted wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to inadequate input validation in the decompression functionality in the vcd2vzt utility, allowing attackers to execute arbitrary commands by exploiting a specially crafted wave file...

PUB-A-315319017

In tmugettrnumthresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-305926929

In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PUB-A-315322436

In tmugetgovtimewindows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-315319015

In tmusettrnumthresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-315322962

In tmusettemplut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-315316499

In TMUIPCGETTABLE, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-315316882

In tmusettable of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-318322946

In applyminlockconstraint of dvfs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-315323409

In tmugettemplut of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-23491 · Scientech It Solution · Appointment Calendar

Name of the Vulnerable Software and Affected Versions: Scientech It Solution Appointment Calendar versions through 2.9.6 Description: The issue affects the Appointment Calendar, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations: For...

PT-2024-23473 · Whizzy · Whizzy

Name of the Vulnerable Software and Affected Versions: Whizzy versions 1.1.18 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. Recommendations: For versions 1.1.18 and earlier, update to a version that contains a fix for this issu...

BELL-CVE-2023-52629

Bulletin has no description...

CVE-2024-29024 JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality

JumpServer is an open source bastion host and an operation and maintenance security audit system. An authenticated user can exploit the Insecure Direct Object Reference IDOR vulnerability in the file manager's bulk transfer by manipulating job IDs to upload malicious files, potentially compromisi...