CVE-2024-29228

The CVE-2024-29228 entry concerns Synology Surveillance Station, specifically the GetStmUrlPath webapi component. Publicly documented details (PT-2024-22823) confirm a missing authorization vulnerability that allows remote authenticated users to obtain sensitive information via unspecified vector...

CVE-2024-29227

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Layout.LayoutSave webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

PT-2024-11914 · Flash Cgi · Mini Thread

Name of the Vulnerable Software and Affected Versions: Mini Thread provided by Flash CGI affected versions not specified Description: The issue concerns a cross-site scripting problem. There is no information about the estimated number of potentially affected devices worldwide or real-world...

PT-2024-26744

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when disabling the stream encoder in the Linux kernel's drm/amd/display module, which invokes a function that no longer exists. This can cause a crash. The problem occur...

PT-2024-2520 · Rockwell Automation · Rockwell Automation Arena Simulation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation affected versions not specified Description: The issue is related to a memory buffer vulnerability that could allow a threat actor to read beyond the intended memory boundaries. This could reveal sensitive...

PT-2024-7846 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the tmpfs component of the Linux kernel. A syzkaller reproducer found a race while attempting to remove dquot information from the rb tree...

PT-2024-8417 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the Linux kernel's vcodec component. This can occur when the ctx list is accessed within the vpu enc ipi handler function after it...

PT-2024-11213 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the corruption of the pg bytes written value in the nfs do recoalesce function. The value of mirror-pg bytes written should only be updated after a successful attemp...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager (CVE-2024-20952, CVE-2024-20918, CVE-2024-20921, CVE-2024-20919, CVE-2024-20926, CVE-2024-20945, CVE-2023-33850)

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager. Vulnerability Details CVEID:CVE-2024-20952 DESCRIPTION: An unspecified vulnerability in Java SE related to the Security component could allow a remote attacker t...

PT-2024-40669 · Antlr4 · Antlr4

Name of the Vulnerable Software and Affected Versions: antlr4 affected versions not specified Description: The issue is related to a security exception in the antlr4 library. The crash occurs in the fromRuleContext function of the PredictionContext class and involves the update function of the...

Cisco Unified IP Phones 7900 Permissions, Privileges, and Access Controls (CVE-2011-1603)

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Security Bulletin: Multiple vulnerabilities in Open JDK affecting Rational Functional Tester / DevOps Test UI

Summary There are multiple vulnerabilities in Open JDK Version 8, OpenJ9 used by Rational Functional Tester RFT / DevOps Test UI. RFT has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-20952 DESCRIPTION: An unspecified vulnerability in Java SE related to the Security componen...

SUSE SLES15 Security Update : gdb (SUSE-SU-2024:0899-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0899-1 advisory. - Drop libdebuginfod1 BuildRequires/Recommends. The former isn't needed because there's a build requirement on libdebuginfod-devel...

PT-2024-15462 · Mcafee · Skyhigh Client Proxy

Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-20105

Name of the Vulnerable Software and Affected Versions vantage6 affected versions not specified Description The vantage6 server has no restrictions on CORS settings, which should be configurable to set allowed origins. The impact is limited because v6 does not use session cookies. Recommendations ...

PT-2024-18467 · Quarkus · Quarkus

Name of the Vulnerable Software and Affected Versions: Quarkus affected versions not specified Description: A vulnerability was found in Quarkus where, under certain conditions related to the Continuous Integration CI process, git credentials could be inadvertently published. This could put the g...

Security Bulletin: IBM Sterling Connect:Direct File Agent is vulnerable to multiple issues due to IBM Runtime Environment Java Technology Edition

Summary IBM Sterling Connect:Direct File Agent uses IBM Runtime Environment Java Technology Edition, Version 7 and 8. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-20952 DESCRIPTION: An unspecified vulnerability in Java SE related ...

PT-2024-2278 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for Android affected versions not specified Description: The issue is related to an information disclosure vulnerability. Exploitation of this vulnerability may allow an attacker to gain unauthorized access to protected...

PT-2024-2298 · Microsoft · Authenticator

Name of the Vulnerable Software and Affected Versions: Microsoft Authenticator affected versions not specified Description: The issue is related to insufficient access controls in the Microsoft Authenticator application, which can be exploited to elevate privileges. Recommendations: At the moment...

PT-2024-2191 · Microsoft · Azure Data Studio

Name of the Vulnerable Software and Affected Versions: Azure Data Studio affected versions not specified Description: The issue is related to insufficient access control in Azure Data Studio, which can be exploited to elevate privileges. Recommendations: At the moment, there is no information abo...