CVE-2024-8359 Visteon Infotainment REFLASH_DDU_FindFile Command Injection Remote Code Execution Vulnerability

Visteon Infotainment REFLASHDDUFindFile Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment systems. Authentication is not required to exploit this vulnerability...

MGASA-2024-0366 Updated kanboard packages fix security vulnerability

In versions prior to 1.2.31 an authenticated user is able to perform a SQL injection, leading to a privilege escalation or loss of confidentiality. It appears that in some insert and update operations the code improperly uses the PicoDB library to update/insert new information...

PT-2024-8958 · Hewlett Packard · Hp Enterprise Insight Remote Support

Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise Insight Remote Support versions prior to 7.14.0.629 Description: A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution. The issue is related to the...

Visteon Infotainment operating system command injection vulnerability

Visteon Infotainment is an automotive infotainment system from Visteon Corporation. Visteon Infotainment suffers from an operating system command injection vulnerability that stems from an improper system call to the REFLASHDDUExtractFile function when handling a specially crafted software update...

CVE-2024-8359: Improper Neutralization of Special Elements used in an OS Command

Visteon Infotainment REFLASHDDUFindFile Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment systems. Authentication is not required to exploit this vulnerability...

HPESBGN04731 rev.1 - HPE Insight Remote Support (IRS), Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Directory Traversal, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Insight Remote Support - Prior to v7.14.0.629 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-11622 ...

CVE-2024-52307 authentik allows a timing attack due to missing constant time comparison for metrics view

authentik is an open-source identity provider. Due to the usage of a non-constant time comparison for the /-/metrics/ endpoint it was possible to brute-force the SECRETKEY, which is used to authenticate the endpoint. The /-/metrics/ endpoint returns Prometheus metrics and is not intended to be...

PT-2024-16750

Name of the Vulnerable Software and Affected Versions Anonymous Restricted Content plugin for WordPress versions up to, and including, 1.6.5 Description The issue allows unauthenticated attackers to extract sensitive data from posts restricted to logged-in users via the WordPress core search...

Update now! Apple confirms vulnerabilities are already being exploited

Apple has released security patches for most of its operating systems, including iOS, Mac, iPadOS, Safari, and visionOS. The updates for iOS and Intel-based Mac systems are especially important, as they tackle vulnerabilities that are being actively exploited by cybercriminals. You should make su...

CGA-4FG9-28H4-5HQF

Bulletin has no description...

PT-2024-9340 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 7.0 through 7.101 Description: The issue affects Drupal Core, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. This enables an attacker to conduct a cross-site scriptin...

PT-2024-9307 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 8.0.0 through 10.2.10 Drupal Core versions 10.3.0 through 10.3.8 Drupal Core versions 11.0.0 through 11.0.7 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This c...

PT-2024-35394 · 2Fauth · 2Fauth

Name of the Vulnerable Software and Affected Versions: 2FAuth version 5.4.1 2FAuth versions prior to 5.4.1 Description: 2FAuth is a web application used to manage Two-Factor Authentication 2FA accounts and generate their security codes. It contains two interconnected vulnerabilities: a Server-Sid...

PT-2024-22850 · Kasda · Kasda Linksmart Router Kw6512

Name of the Vulnerable Software and Affected Versions: Kasda LinkSmart Router KW6512 versions = v1.3 Description: The issue is related to Multiple OS Command Injection vulnerabilities. An authenticated remote attacker can execute arbitrary OS commands via various cgi parameters. Recommendations:...

PT-2024-9323 · Drupal +1 · Drupal Core +1

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 7.0 through 7.101 Drupal Core versions 8.0.0 through 10.2.10 Drupal Core versions 10.3.0 through 10.3.8 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This can...

PT-2024-8656 · Google +4 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 131.0.6778.85 Description: The issue is related to a Type Confusion in V8, which can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page. This could lead to arbitrary code...

PT-2024-35201 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.0.2.1 Description: The issue allows an authenticated user to perform unauthorized actions that should be reserved for administrators due to improper access controls. Recommendations: For versions...

PT-2024-34779 · Garmur · Garmur

Name of the Vulnerable Software and Affected Versions: Garmur While Loading versions n/a through 3.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

Vulnerability in SICK Incoming Goods Suite

SICK found a vulnerability in the Incoming Goods Suite which allows privilege escalation to the administrative level. Currently SICK is not aware of any public exploits specifically targeting the vulnerability. SICK has released a new version and strongly recommends updating to the newest version...

CVE-2024-43416 GLPI vulnerable to enumeration of users' email addresses by unauthenticated user

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an unauthenticated user can use an application endpoint to check if an email address corresponds to a valid GLPI user. Version 10.0.17 fixes the issue...