USN-6640-1 shadow vulnerability

It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker could possibly use this issue to retrieve a password from memory, exposing sensitive information...

Massive utility scam campaign spreads via online ads

For many households, energy costs represent a significant part of their overall budget. And when customers want to discuss their bills or look for ways to save money, scammers are just a phone call away. Enter the utility scam, where crooks pretend to be your utility company so they can threaten...

CVE-2024-24259

A memory leak flaw was found in the glutAddMenuEntry function of freeglut, an open-source alternative to the OpenGL Utility Toolkit. This issue may allow an attacker to launch a denial of service attack by crashing or hanging the program or take advantage of other unexpected program behavior...

CVE-2024-23603

An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-21782

BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy scp utility but do not have access to Advanced shell bash can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873...

CVE-2024-23603 BIG-IP Advanced WAF and ASM Configuration utility vulnerability

An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-23603

CVE-2024-23603 is an SQL injection in the BIG-IP Configuration utility, specifically in the BIG-IP Advanced WAF/ASM Configuration utility. A highly privileged authenticated attacker can exploit it to execute malicious SQL statements. Affected: BIG-IP Advanced WAF/ASM; vulnerable in 17.1.0 and 16....

CVE-2024-23603 BIG-IP Advanced WAF and ASM Configuration utility vulnerability

An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Design/Logic Flaw

Uncontrolled search path in IntelR QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28745

Uncontrolled search path in IntelR QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28745

The CVE-2023-28745 vulnerability affects Intel’s QSFP+ Configuration Utility software across all versions. It is caused by an uncontrolled search path, enabling an authenticated user with local access to potentially escalate privileges. The issue is documented with a CVSS v3.1 base score of 6.7 (...

K000138047: BIG-IP Advanced WAF and BIG-IP ASM Configuration utility vulnerability CVE-2024-23603

Security Advisory Description A SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. CVE-2024-23603 Impact A highly privileged authenticated attacker can exploit this vulnerability to execute malicious SQL statements through the BIG-IP Configuration...

[SECURITY] Fedora 38 Update: rust-vmm-sys-util-0.12.1-2.fc38

A system utility set...

PT-2024-19961 · F5 · F5Os Qkview Utility

Name of the Vulnerable Software and Affected Versions: F5OS QKView utility affected versions not specified Description: A directory traversal vulnerability exists in the F5OS QKView utility, allowing an authenticated attacker to read files outside the QKView directory. Note that software versions...

PT-2024-19958

Name of the Vulnerable Software and Affected Versions BIG-IP affected versions not specified Description An SQL injection issue exists in an undisclosed page of the BIG-IP Configuration utility. The exact nature of the issue and its potential impact are not fully detailed, but it suggests a...

Intel Extreme Tuning Utility Security Vulnerability

Intel Extreme Tuning Utility is a software from Intel Corporation that can increase CPU frequency. In addition to supporting overclocking of CPUs and graphics cards, the program also features system hardware information detection and real-time monitoring of current system status to ensure system...

F5 F5OS Path Traversal Vulnerability

F5 F5OS is a proprietary operating system that runs on F5 Corporation's F5 devices to support its application delivery control and security features. A security vulnerability exists in the F5 F5OS QKView utility that originates from allowing an authenticated attacker to read files outside of the...

CVE-2024-23603: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-21782: Improper Neutralization of Special Elements used in an OS Command

BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy scp utility but do not have access to Advanced shell bash can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873...

CVE-2023-28745: Uncontrolled Search Path Element

Uncontrolled search path in IntelR QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...