RHSA-2024:0106 Red Hat Security Advisory: nss security update

Bulletin has no description...

CGA-6G9Q-VVFG-JJ35

Bulletin has no description...

CGA-VP8J-G44Q-QQRX

Bulletin has no description...

CGA-6MFV-7MQX-6M8H

Bulletin has no description...

Cisco IOS XR Software Segment Routing for Intermediate System-to-Intermediate System Denial of Service Vulnerability

A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System IS-IS protocol of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient...

CGA-M532-7HW5-2CPC

Bulletin has no description...

CGA-F7P8-87MM-G9J6

Bulletin has no description...

Huawei HarmonyOS and EMUI Privilege Control Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A privilege control vulnerability exists in Huawei...

CGA-VM3C-2528-9VHQ

Bulletin has no description...

CGA-WMCR-C3G6-2XJ5

Bulletin has no description...

CGA-8742-R4QR-FC48

Bulletin has no description...

PT-2024-20724 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Semiconductor Mobile Processor and Modem Exynos versions 9820 through 9825 Samsung Semiconductor Mobile Processor and Modem Exynos versions 980 through 990 Samsung Semiconductor Mobile Processor and Modem Exynos versions 850 through...

PT-2024-20725 · Samsung · Samsung Exynos Modem +1

Name of the Vulnerable Software and Affected Versions: Samsung Exynos versions 9820 through 9825 Samsung Exynos versions 980 through 990 Samsung Exynos versions 850 through 1080 Samsung Exynos versions 2100 through 2200 Samsung Exynos versions 1280 through 1380 Samsung Exynos version 1330 Samsung...

PT-2024-6477 · Google +5 · Skia +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.137 Microsoft Edge affected versions not specified Description: A heap buffer overflow in the Skia library of Google Chrome and Microsoft Edge exists due to a boundary error when processing untrusted...

PT-2024-12595 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF13 Description: The issue is related to the deserialization of untrusted data. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...

PT-2024-6350 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier Description: The issue is related to a use-after-free vulnerability that could result in arbitrary code execution in the context of the current...

PT-2024-6214 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2022 SU6 Ivanti EPM versions prior to the 2024 September update Description: The issue is related to an uncontrolled search path in the agent of Ivanti EPM. This can be exploited by a local authenticated attacker...

Multiple Vulnerabilities in Veeam Backup & Replication

On Wednesday, September 4, 2024, backup and recovery software provider Veeam released their September security bulletin disclosing various vulnerabilities in Veeam products. One of the higher-severity vulnerabilities included in the bulletin is CVE-2024-40711, a critical unauthenticated remote co...

Pgpool-II vulnerable to information disclosure

Overview Pgpool-II is a cluster management tool. Pgpool-II contains an information disclosure vulnerability CWE-213 in its query cache function. PgPool Global Development Group reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and PgPool Global Development...

PT-2024-9665 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-10 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting attacks. Remote authenticated users with...