K000138047: BIG-IP Advanced WAF and BIG-IP ASM Configuration utility vulnerability CVE-2024-23603

Security Advisory Description A SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. CVE-2024-23603 Impact A highly privileged authenticated attacker can exploit this vulnerability to execute malicious SQL statements through the BIG-IP Configuration...

[SECURITY] Fedora 38 Update: rust-vmm-sys-util-0.12.1-2.fc38

A system utility set...

PT-2024-19961 · F5 · F5Os Qkview Utility

Name of the Vulnerable Software and Affected Versions: F5OS QKView utility affected versions not specified Description: A directory traversal vulnerability exists in the F5OS QKView utility, allowing an authenticated attacker to read files outside the QKView directory. Note that software versions...

Fedora: Security Advisory for rust-vmm-sys-util (FEDORA-2024-f2305d485f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-19958

Name of the Vulnerable Software and Affected Versions BIG-IP affected versions not specified Description An SQL injection issue exists in an undisclosed page of the BIG-IP Configuration utility. The exact nature of the issue and its potential impact are not fully detailed, but it suggests a...

Intel Extreme Tuning Utility Security Vulnerability

Intel Extreme Tuning Utility is a software from Intel Corporation that can increase CPU frequency. In addition to supporting overclocking of CPUs and graphics cards, the program also features system hardware information detection and real-time monitoring of current system status to ensure system...

F5 F5OS Path Traversal Vulnerability

F5 F5OS is a proprietary operating system that runs on F5 Corporation's F5 devices to support its application delivery control and security features. A security vulnerability exists in the F5 F5OS QKView utility that originates from allowing an authenticated attacker to read files outside of the...

CVE-2024-23603: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-21782: Improper Neutralization of Special Elements used in an OS Command

BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy scp utility but do not have access to Advanced shell bash can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873...

CVE-2023-28745: Uncontrolled Search Path Element

Uncontrolled search path in IntelR QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

F5 BIG-IP SQL Injection Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. F5 BIG-IP suffers from an SQL injection vulnerability that originates from an SQL injection vulnerability in an undisclosed pa...

F5 Networks BIG-IP : BIG-IP Advanced WAF and BIG-IP ASM Configuration utility vulnerability (K000138047)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K000138047 advisory. A SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration...

CVE-2024-25112

A flaw was found in the Exiv2 command-line utility. The denial of service is triggered when Exiv2 is used to read the metadata of a crafted video file. An unbounded recursion can cause Exiv2 to crash by exhausting the stack...

Intel® QSFP+ Configuration Utility Software Advisory

Summary: A potential security vulnerability in some Intel® QSFP+ Configuration Utility software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for Intel® QSFP+ Configuration Utility softwar...

Intel Extreme Tuning Utility (XTU) February 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Extreme Tuning Utility XTU software, which might allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

PT-2024-2700

Name of the Vulnerable Software and Affected Versions Intel QSFP+ Configuration Utility versions all Description The issue is related to an uncontrolled search path element in the Intel QSFP+ Configuration Utility software. This could potentially allow an authenticated user to escalate their...

PT-2024-1881 · Intel · Intel Ssu

Name of the Vulnerable Software and Affected Versions: IntelR SSU versions prior to 3.0.0.2 Description: The issue is related to an uncontrolled search path element in the Intel System Support Utility. This could allow an authenticated user to potentially enable escalation of privilege via local...

PYSEC-2024-107

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function,...

CVE-2024-25112

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function,...

CVE-2024-22224

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svcnas utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges...