Vulnerabilities fixed in Oracle Essbase

Vulnerabilities have been fixed in Oracle Essbase. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Denial-of-Service DoS. Increased user privileges Oracle has made updates available to fix the vulnerabilities. See the...

Vulnerabilities fixed in Oracle Database Server

Vulnerabilities have been fixed in Oracle Database Server. A malicious party can exploit the vulnerabilities to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS. Access to sensitive data Manipulation of data Circumvention of security measure Oracle ha...

VMSA-2024-0012:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081)

Advisory ID: | VMSA-2024-0012.1 ---|--- Severity: | Critical CVSSv3 Range: | 7.8-9.8 Synopsis: | VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities CVE-2024-37079, CVE-2024-37080, CVE-2024-37081 Issue date: | 2024-06-17 Updated on: | 2026-01-23 CVEs |...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft fixed vulnerabilities in Dynamics 365 Customer Insights. A malicious party could exploit the vulnerabilities to launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the browser of the victim, or access sensitive data in the context of the...

CVE-2024-33512

creationtimestamp| type| source ---|---|--- 2024-05-02 09:46:45+00:00| seen| https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar 2024-05-02 12:36:15+00:00| seen| https://t.me/truesecator/5691 2026-07-06 11:00:07+00:00| seen| https://t.me/ZerodayAlert/2...

CVE-2024-26305

creationtimestamp| type| source ---|---|--- 2024-05-02 09:46:45+00:00| seen| https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar 2024-05-02 12:36:15+00:00| seen| https://t.me/truesecator/5691 2026-07-06 11:00:07+00:00| seen| https://t.me/ZerodayAlert/2...

CVE-2024-26304

creationtimestamp| type| source ---|---|--- 2024-05-02 09:46:45+00:00| seen| https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar 2024-05-02 12:36:15+00:00| seen| https://t.me/truesecator/5691 2024-05-03 07:24:45+00:00| seen|...

CVE-2024-33515

creationtimestamp| type| source ---|---|--- 2024-05-02 09:46:45+00:00| seen| https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar...

CVE-2024-33511

creationtimestamp| type| source ---|---|--- 2024-05-02 09:46:45+00:00| seen| https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar 2024-05-02 12:36:15+00:00| seen| https://t.me/truesecator/5691 2026-07-06 11:00:07+00:00| seen| https://t.me/ZerodayAlert/2...

CVE-2024-33517

creationtimestamp| type| source ---|---|--- 2024-05-02 09:46:45+00:00| seen| https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar...

CVE-2024-33514

creationtimestamp| type| source ---|---|--- 2024-05-02 09:46:45+00:00| seen| https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar...

CVE-2024-33513

creationtimestamp| type| source ---|---|--- 2024-05-02 09:46:45+00:00| seen| https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar...

CVE-2024-33516

creationtimestamp| type| source ---|---|--- 2024-05-02 09:46:45+00:00| seen| https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar...

Vulnerabilities fixed in Oracle Database Products

Oracle has fixed vulnerabilities in several Database Server products. A malicious party can exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Access to sensitive data...

KLA65599 OSI vulnerability in PuTTY

Information disclosure vulnerability was found in PuTTY. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories oss-security – CVE-2024-31497: Secret Key Recovery of NIST P-521 Private Keys Through Biased ECDSA Nonces in PuTTY Client Exploitation Publi...

Vulnerability fixed in Microsoft SQL Server

Microsoft has fixed and vulnerability in SQL Server. The vulnerability is located in the Django backend and allows a malicious party to be able to use the client application of the victim to execute an SQL injection and thus execute arbitrary code execute arbitrary code with the victim's privileg...

Vulnerabilities fixed in Arista EOS

Arista has fixed a vulnerability in Arista NG Firewall, part of Arista EOS Edge Threat Management. The vulnerability allows a malicious person with access rights to 'advanced report application' could, through SQL injection, execute code with elevated privileges to execute code on the underlying...

CVE-2023-52462

A flaw was found in the Linux kernel. When the register is spilled onto a stack as a 1/2/4-byte register, the slottypeBPFREGSIZE - 1 is set, possibly including a few more below it, depending on the actual spill size. To confirm if some stack slots have a spilled register, consult slottype7, not...

CVE-2023-52461

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix bounds limiting when given a malformed entity If we're given a malformed entity in drmschedentityinit--shouldn't happen, but we verify--with out-of-bounds priority value, we set it to an allowed value. Fix the...

CVE-2024-26589

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject variable offset alu on PTRTOFLOWKEYS For PTRTOFLOWKEYS, checkflowkeysaccess only uses fixed off for validation. However, variable offset ptr alu is not prohibited for this ptr kind. So the variable offset is not...