CVE-2024-52293 Craft has a Potential Remote Code Execution via missing path normalization & Twig SSTI

Craft is a content management system CMS. Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3...

RHSA-2024:9016 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

PT-2025-25271

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central versions prior to 8.0.7007 Description The issue is related to an insecure deserialization operation in Trend Micro Apex Central, which could lead to a pre-authentication remote code execution on affected installations...

Intel VTune Profiler Advisory - Lenovo Support US

No description provided...

Intel Graphics Software Advisory - Lenovo Support US

No description provided...

Intel SGX SDK Advisory - Lenovo Support US

No description provided...

CVE-2024-50336 matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the...

Intel CST Software Advisory - Lenovo Support US

No description provided...

CVE-2024-47588

CVE-2024-47588 affects SAP NetWeaver Java (Software Update Manager 1.1). Under certain upgrade-error conditions, credentials are written in plaintext to a log file, enabling a local attacker (authenticated as a non-administrative user) to exfiltrate credentials from logs. The documented impact is...

CVE-2024-47588 Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager)

In SAP NetWeaver Java Software Update Manager 1.1, under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the...

Intel PROSet/Wireless WiFi November 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® PROSet/Wireless WiFi products, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the...

PT-2024-8831 · Intel · Intel Granulate

Name of the Vulnerable Software and Affected Versions: IntelR GranulateTM software versions prior to 4.30.1 Description: The issue is related to improper access control in IntelR GranulateTM software, which may allow an authenticated user to potentially enable escalation of privilege via local...

CVE-2024-47588: Insufficiently Protected Credentials

In SAP NetWeaver Java Software Update Manager 1.1, under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the...

SUSE SLES12 Security Update : expat (SUSE-SU-2024:3968-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:3968-1 advisory. - CVE-2024-50602: Fixed a denial of service via XMLResumeParser bsc1232579. Tenable has extracted the preceding description block directly from the SUS...

HPESBUX04729 rev.1 - HP-UX NTP Software, Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Write Access to the File System, Null pointer dereference SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX NTP Software - Prior to C.4.2.8.7.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

Intel® CIP Software Advisory

Summary: Potential security vulnerabilities in some Intel® Computing Improvement Program software Intel® CIP may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-36276 Description: Insecure...

Intel® QuickAssist Technology Engine for OpenSSL Advisory

Summary: Potential security vulnerabilities in the Intel® QuickAssist Technology Intel® QAT Engine for OpenSSL engine for OpenSSL software may allow information disclosure . Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-336...

Intel® Thunderbolt™ Share Software Advisory

Summary: A potential security vulnerability in some Thunderbolt™ Share software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-34022 Description: Improper Access Control in some Thunderbolt™...

Intel® SGX SDK Advisory 

Summary: Potential security vulnerability in the Intel® Software Guard Extensions Intel® SGX Software Development Kit SDK may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-34776 Description:...

Intel® DSA Software Advisory

Summary: Potential security vulnerabilities in some Intel® Driver Support Assistant Intel® DSA Software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-36488 Description: Improper Access...