The vulnerability of GRUB’s NTFS driver, a loader program for operating systems, relates to reading memory beyond the buffer boundaries, allowing an attacker to read the contents of the RAM.

The vulnerability of the GRUB loader driver for NTFS operating systems involves reading memory beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to read the contents of the RAM...

SUSE SLES12: java-1_8_0-openjdk / java-1_8_0-openjdk-demo / etc (SUSE-SU-2024:3987-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3987-1 advisory. Update to version jdk8u432 icedtea-3.33.0: - CVE-2024-21208: Enhance HTTP client bsc1231702. - CVE-2024-21210: Improve handling of vectorizatio...

CVE-2024-52370

Unrestricted Upload of File with Dangerous Type vulnerability in Hive Support Hive Support hive-support allows Upload a Web Shell to a Web Server.This issue affects Hive Support: from n/a through = 1.1.1...

CVE-2024-52370 WordPress Hive Support – WordPress Help Desk, Live Chat & AI Chat Bot Plugin for WordPress plugin <= 1.1.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Hive Support Hive Support hive-support allows Upload a Web Shell to a Web Server.This issue affects Hive Support: from n/a through = 1.1.1...

PT-2024-35207 · WordPress · Hive Support – Wordpress Help Desk

Name of the Vulnerable Software and Affected Versions: Hive Support – WordPress Help Desk versions 1.1.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, potentially enabling an attacker to upload a web shell to a web server. This could grant an...

The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird relates to deficiencies in access control, allowing attackers to compromise data integrity.

The vulnerabilities of Firefox ESR, Firefox, and the email client Thunderbird are related to deficiencies in access control. Exploiting these vulnerabilities can allow a malicious actor to compromise data integrity remotely...

Fedora 37 : weechat (2022-88252e4f80)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-88252e4f80 advisory. - add command /item to create custom bar items - add bar item spacer - add case conversion in evaluation of expressions with lower:string and upper:string -...

The vulnerability of the execute_filter_audio function in the archive_read_support_format_rar.c library of the Libarchive library, which involves reading beyond the permissible buffer data limits, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the executefilteraudio function in the archivereadsupportformatrar.c component of the Libarchive library relates to reading data beyond the allowable buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, an...

Fedora 37 : java-1.8.0-openjdk (2022-dedbb92a08)

"The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-dedbb92a08 advisory. New in release OpenJDK 8u352 2022-10-18 Release announcement Full release notes Security Fixes JDK-8282252: Improve BigInteger/Decimal validation...

Fedora 41 : firefox (2024-55a5adeec4)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-55a5adeec4 advisory. PipeWire camera support: backport set of upstream patches ---- - New upstream update 130.0 Tenable has extracted the preceding description block...

Fedora 41 : linux-firmware (2024-3cd42e9e29)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3cd42e9e29 advisory. Update to upstream 20240909: i915: Update MTL DMC v2.23 cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops amdgpu: Revert sienna cichlid...

CVE-2024-9477

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting XSS. This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified...

CVE-2024-9477

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting XSS.This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified ...

CVE-2024-9477 XSS in AirTies' Air4443 Firmware

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting XSS. This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified...

CVE-2024-9477

CVE-2024-9477 describes an XSS in AirTies Air4443 Firmware caused by improper input neutralization during web page generation. Affected product: AirTies Air4443 Firmware (versions through 14102024). Root cause identified as improper input handling in web page generation, enabling cross-site scrip...

CVE-2024-9477 XSS in AirTies' Air4443 Firmware

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting XSS. This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified...

CVE-2024-21540

Rejected reason: This issue is not a vulnerability because no real attack scenario can happen...

CVE-2024-21540

...

CVE-2024-21540

...

CVE-2024-21540

CVE-2024-21540: Directory Traversal in the retrieveSourceMap function of the source-map-support package. Affected IBM products (as per IBM security bulletins) include Instana/Process Mining and IBM Event Processing components, with multiple builds affected. Root cause: improper handling of pathna...