CVE-2024-39563

A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker sending a specially crafted request to execute arbitrary shell commands on the Junos Space Appliance, leading to remote command execution by the web application, gaining complete...

CVE-2024-39563

CVE-2024-39563 affects Juniper Networks Junos Space, specifically version 24.1R1. A vulnerable script in the Junos Space web application accepts attacker-controlled input from a GET request without proper sanitization, enabling an unauthenticated, network-based attacker to execute arbitrary shell...

CVE-2024-39563 Junos Space: Remote Command Execution (RCE) vulnerability in web application

A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker sending a specially crafted request to execute arbitrary shell commands on the Junos Space Appliance, leading to remote command execution by the web application, gaining complete...

CVE-2024-39563 Junos Space: Remote Command Execution (RCE) vulnerability in web application

A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker sending a specially crafted request to execute arbitrary shell commands on the Junos Space Appliance, leading to remote command execution by the web application, gaining complete...

Juniper Networks Junos Space 命令注入漏洞

Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, Inc. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A command injection vulnerability exists in Juniper Networks Junos...

CVE-2024-47420

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2024-45145

Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction ...

CVE-2024-20787

Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

PT-2024-7780

Name of the Vulnerable Software and Affected Versions Junos Space version 24.1R1 Description A Command Injection issue in Juniper Networks Junos Space allows an unauthenticated, network-based attacker to execute arbitrary shell commands on the Junos Space Appliance by sending a specially crafted...

KB5046398: Windows Recovery Environment update for Windows 11, version 21H2: October 8, 2024

None None...

KB5046400: Windows Recovery Environment update for Windows 10, version 21H2 and 22H2: October 8, 2024

None None...

KB5046399: Windows Recovery Environment update for Windows Server 2022: October 8, 2024

None None...

GHSA-6HWR-6V2F-3M88 XXE in PHPSpreadsheet's XLSX reader

Summary The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white-spaces. On servers that allow users to upload their own Excel XLSX sheets, Server files and sensitive information can be disclosed by...

CVE-2024-23378

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record...

CVE-2024-23378

CVE-2024-23378 affects the MSM module in Qualcomm chipsets. The vulnerability is described as memory corruption occurring when invoking IOCTL calls from user space during audio playback and recording, caused by improper handling of IOCTLs. The provided documents do not specify concrete affected v...

CVE-2024-23376

CVE-2024-23376 involves memory corruption while sending the persist buffer IOCTL from user-space to kernel space in Qualcomm-related components (notably Qualcomm Snapdragon Auto). The issue is described as a memory corruption (also characterized as a use-after-free in some feeds) affecting the pe...

CVE-2024-23370

CVE-2024-23370 is a memory corruption issue involving Qualcomm automotive multimedia: when one process issues IOCTLs from user-space to create a HAB virtual channel and another process issues IOCTLs to destroy the same channel, the conflict can lead to memory corruption. Connected sources corrobo...

PT-2024-19853

Name of the Vulnerable Software and Affected Versions MSM module affected versions not specified Description The issue involves memory corruption when invoking IOCTL calls for the MSM module from user space during audio playback and record. This occurs due to improper handling of IOCTL calls,...

Increase the size of the App Layering boot disk for packaging

When you create/edit layers in App Layering, a packaging machine is created. If you have caching enabled, then a boot disk is created as well as copies of the OS layer and any relevant App Layer. When the packing machine is booted, some system data such as the pagefile is stored on that boot disk...

kexec-tools bug fix update

An update is available for kexec-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kexec-tools packages contain the /sbin/kexec binary and utilities tha...