15867 matches found
CVE-2024-40392: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 was discovered to contain a SQL injection vulnerability via the name parameter under addnew.php...
PT-2024-28824 · Unknown · Sourcecodester Pharmacy/Medical Store Point Of Sale System
Name of the Vulnerable Software and Affected Versions: SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the na...
SUSE-SU-2024:2479-1 Security update for python3
This update for python3 fixes the following issues: - CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number bsc1219559. - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb bsc1221854. - CVE-2024-4032: Rearranging definition of...
Store Configuration by Server Based Discovery Fails
When attempting to configure Receiver Stores by entering in address of StoreFront server in Email/Server Based Discovery dialog, the following error appears: "Your account cannot be added using this server address. Make sure you entered it correctly. You may need to enter your email address...
Vdisk shows “No Server” for size in the PVS Console
When viewing a vdisk in the PVS Console the size will show as "No Server". The following error also appears when using XenDesktop Setup Wizard: A required PVS server in the selected site is offline or there is no server assigned to a required store...
IPC Error While Validating Provisioning Services Store
Multiple Provisioning Services Servers in the farm come with an IPC error when trying to validate the store path except on the server you are running Provisioning Services Server console: When validating the store, following error appears in the console Log:...
Error: "Cannot connect to server. Try again in a few minutes" on StoreFront
End-user is unable to add Store into Receiver, unless the full Store path is appended. Example https://SF-FQDN/Citrix/; - Add Store is successful https://SF-FQDN - Add Store fails: After user gets prompted for credentials, an error message appears: "Cannot connect to server. Try again in a few...
DEBIAN-CVE-2024-40994
In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in maxvclocksstore On 32bit systems, the "4 max" multiply can overflow. Use kcalloc to do the allocation to prevent this...
UBUNTU-CVE-2024-40994
In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in maxvclocksstore On 32bit systems, the "4 max" multiply can overflow. Use kcalloc to do the allocation to prevent this...
iPhone users in 98 countries warned about spyware by Apple
In April 2024, we reported how Apple was warning people of mercenary attacks via its threat notification system. At the time it warned users in 92 countries. In a new round, Apple is now warning users in 98 countries of potential mercenary spyware attacks. The message sent to the affected users...
MAL-2024-7731 Malicious code in etp-config-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22e9cd622d75b3bb30c9c31a8dcf71c38fc832db9306ad6ed4f9411bc5321c01 The OpenSSF Package Analysis project identified 'etp-config-store' @ 200.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in etp-config-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22e9cd622d75b3bb30c9c31a8dcf71c38fc832db9306ad6ed4f9411bc5321c01 The OpenSSF Package Analysis project identified 'etp-config-store' @ 200.0.1 npm as malicious. It is considered malicious because: - The package...
CVE-2024-39886
TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App...
CVE-2024-39886
TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App...
CVE-2024-39886
TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App...
CVE-2024-39886
The TONE store App (provided by DREAM TRAIN INTERNET INC.) versions 3.4.2 and earlier is vulnerable to a cleartext transmission issue (CWE-419 ) when communicating with the TONE store website. This unprotected primary channel allows a man-in-the-middle (MITM) attack, where an adversary could inte...
Python SSL Module Function Unauthenticated Access
The vulnerability of the certstorestats and getcacerts functions in the SSL module of the Python programming language interpreter CPython is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
CVE-2024-39886: Unprotected Primary Channel
TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App...
PT-2024-28710 · Unknown · Tone Store App
Name of the Vulnerable Software and Affected Versions: TONE store App versions 3.4.2 and earlier Description: The issue is related to an unprotected primary channel in the TONE store App, which communicates with the TONE store website in cleartext. This could allow a man-in-the-middle attack,...