Siemens Sinumerik CMC Unauthorized Access

The vulnerability of the Create MyConfig CMC utility in Siemens Sinumerik programmable logic controllers is related to the disclosure of information through registration files in the log files. Exploiting this vulnerability can allow attackers to circumvent security restrictions and gain...

CVE-2021-27702

Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard...

CVE-2024-10217

XSS Attack in mar.jar, Monitoring Archive Utility MAR Utility, monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence...

CVE-2024-10218

XSS Attack in mar.jar, Monitoring Archive Utility MAR Utility, monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence...

CVE-2024-10218

TIBCO Hawk and TIBCO Operational Intelligence (MAR Utility) are affected by CVE-2024-10218 due to a stored-XEE/XSS vulnerability in mar.jar and monitoringconsolecommon.jar. The issue could allow an attacker to read sensitive files on the host with the server’s privileges. Affected products/versio...

CVE-2024-10218 TIBCO Hawk Stored-XEE Vulnerability

XSS Attack in mar.jar, Monitoring Archive Utility MAR Utility, monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence...

CVE-2024-10217

CVE-2024-10217 describes a stored XSS vulnerability in TIBCO Hawk and TIBCO Operational Intelligence, specifically in mar.jar (Monitoring Archive Utility) and monitoringconsolecommon.jar. The advisory details that a malicious .mar file could trigger XSS, potentially allowing an attacker to execut...

CVE-2024-10217 TIBCO Hawk Stored-XSS Vulnerability

XSS Attack in mar.jar, Monitoring Archive Utility MAR Utility, monitoringconsolecommon.jar in TIBCO Software Inc TIBCO Hawk and TIBCO Operational Intelligence...

microsoft-ai-azure-utility-samples (>=0.2.5, <=0.2.7) potentially affected by CVE-2024-43598 via lightgbm (2.1.2)

lightgbm PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on lightgbm and may be impacted: - microsoft-ai-azure-utility-samples =0.2.5, =0.2.7 Source cves: CVE-2024-43598 Source advisory: OSV:PYSEC-2024-231...

CVE-2024-21946

Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

TIBCO Security Advisory: November 12, 2024 - TIBCO Hawk & Operational Intelligence - CVE-2024-10217

TIBCO Hawk Stored-XSS Vulnerability Original release date: November 12, 2024 Last revised: --- CVE-2024-10217 Source: TIBCO Software Inc. Products Affected TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.2.4, and 6.3.0 TIBCO Operational Intelligence Hawk versions 7.2.0, 7.2.1, and 7.2.2 Compone...

CVE-2024-21946

Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21946

The CVE targets AMD Ryzen Master Utility installation directory permissions. Affected component: Ryzen Master/Monitoring SDK; root cause: incorrect default ACL permissions in installation folders and subfolders. Impact: local privilege escalation potentially leading to arbitrary code execution (h...

CVE-2021-27702

Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard...

CVE-2021-27702: Improper Neutralization of Special Elements used in a Command

Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard...

PT-2024-19124 · Amd · Amd Ryzen Master Utility

Name of the Vulnerable Software and Affected Versions: AMD Ryzen Master Utility affected versions not specified Description: The issue is related to incorrect default permissions in the installation directory of the AMD Ryzen Master Utility, which could allow an attacker to achieve privilege...

CVE-2024-21946: Incorrect Default Permissions

Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE

GNU is vulnerable to command injection due to missing sanitization of filenames when the LESSCLOSE environment variable is set and invoked. This could allow an attacker to execute malicious commands within the privileges of the utility...

PT-2024-16122 · Tibco Software · Tibco Operational Intelligence +1

Name of the Vulnerable Software and Affected Versions: TIBCO Hawk and TIBCO Operational Intelligence affected versions not specified Description: A high-severity issue exists in TIBCO Software Inc. products, specifically in the Monitoring Archive Utility MAR Utility, affecting multiple jar files,...

Ryzen™ Master Monitoring SDK & AMD Ryzen™ Master Utility Incorrect Default Permission Vulnerabilities

Bulletin ID: AMD-SB-9004 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary The AMD Ryzen™ Master Monitoring SDK is a public distribution that is designed to allow software developers to add processor and memory functions to their own utilities...