CVE-2023-34315

Incorrect default permissions in some IntelR VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-17462 · Unknown · Twister Antivirus

Name of the Vulnerable Software and Affected Versions: Twister Antivirus version 8.17 Description: The issue is related to a Denial of Service vulnerability. It can be triggered by specific codes, including 0x80112044, 0x8011204B, 0x8011204F, 0x80112057, 0x8011205B, 0x8011205F. Recommendations: F...

Filseclab Twister Antivirus Buffer Error Vulnerability

Filseclab Twister Antivirus is an intelligent antivirus from Fair Filseclab. A buffer error vulnerability exists in Filseclab Twister Antivirus version v8.17, which stems from vulnerability to out-of-bounds reads...

PT-2024-16664 · Unknown · Twister Antivirus

Name of the Vulnerable Software and Affected Versions: Twister Antivirus version 8.17 Description: The issue allows Elevation of Privileges on the computer where Twister Antivirus is installed by triggering specific IOCTL codes of the fildds.sys driver, including 0x80112067, 0x801120CB, and...

Filseclab Twister Antivirus Code Issue Vulnerability

Filseclab Twister Antivirus is an intelligent antivirus software from Fair Filseclab. A code issue vulnerability exists in Filseclab Twister Antivirus version v8.17, which stems from the presence of an elevation of privilege vulnerability...

Atos Unify OpenScape Cross-Site Scripting Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A cross-site scripting vulnerability exists in Atos Unify OpenScape Voice Trace Manager V8 V8 prior to R0.9.11, which stems from a vulnerability that allows unauthenticated cross-site scripting attacks in t...

Atos Unify OpenScape Command Injection Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A command injection vulnerability exists in Atos Unify OpenScape Voice Trace Manager V8 V8 prior to R0.9.11, which originates from allowing authenticated command injection via ftp...

Atos Unify OpenScape Path Traversal Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A path traversal vulnerability exists in Atos Unify OpenScape Voice Trace Manager V8 V8 prior to R0.9.11, which stems from allowing authenticated path traversal in the user interface...

Apache Tomcat Security Vulnerability

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server . Used to implement the Servlet and JavaServer Page JSP support. A security vulnerability exists in Apache Tomcat versions 8.5.7 through 8.5.63 and 9.0.0-M11 through 9.0.43. An attacker could explo...

IBM OpenPages with Watson Security Vulnerability

IBM OpenPages with Watson is an AI-powered financial risk analytics solution. The platform is based on AI technology to predict risk factors and minimize risk in financial activities by integrating, automatically identifying, measuring, monitoring, analyzing, and managing risk data through a numb...

Oracle ZFS Storage Appliance Security Vulnerability

Oracle ZFS Storage Appliance is a flash-enabled, petabyte-scale file storage with built-in Oracle database from Oracle Corporation USA. A security vulnerability exists in Oracle Systems' Oracle ZFS Storage Appliance Kit version 8.8. An attacker could exploit the vulnerability to access sensitive...

Vulnerability fixed in VMware Aria Automation

VMWare has fixed a vulnerability in Aria Automation, formerly known as vRealize Automation. An authenticated malicious party could exploit the vulnerability to gain access gain access to the Aria Automation instance, and possibly to systems of third parties. The malicious party can thus perform...

UBUNTU-CVE-2024-20969

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

PT-2024-1188 · Oracle · Oracle Zfs Storage Appliance Kit

Name of the Vulnerable Software and Affected Versions: Oracle ZFS Storage Appliance Kit version 8.8 Description: The issue is related to insufficient input validation in the Core component of the Oracle ZFS Storage Appliance Kit. This allows a high-privileged attacker with logon to the...

PT-2024-14034 · Hypr · Hypr Workforce Access

Name of the Vulnerable Software and Affected Versions: HYPR Workforce Access versions prior to 8.7 Description: The issue is related to an Improper Input Validation vulnerability in HYPR Workforce Access on Windows, which allows Path Traversal. Recommendations: For versions prior to 8.7, update t...

HYPR Backlink Vulnerability

HYPR is a security application from HYPR that implements password-less security. A security vulnerability exists in HYPR Workforce Access prior to version 8.7 that stems from an incorrectly resolved file access link that allows a user to take control of a file name...

PT-2024-14933 · Hypr · Hypr Workforce Access

Name of the Vulnerable Software and Affected Versions: HYPR Workforce Access versions prior to 8.7 Description: The issue is related to an Improper Link Resolution Before File Access, also known as 'Link Following', which allows User-Controlled Filename. This affects HYPR Workforce Access on MacO...

UJCMS Security Vulnerabilities

UJCMS is a Java open source content management system from UJCMS Open Source. A security vulnerability exists in UJCMS version v.8.0.2, which stems from the presence of a file upload vulnerability that allows a local attacker to execute arbitrary code via a crafted file...

PT-2023-30874 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions prior to 8.5.14 Concrete CMS versions 9 prior to 9.2.3 Description: The issue allows Cross Site Request Forgery CSRF via the "ccm/calendar/dialogs/event/delete/submit" API endpoint. An attacker can force an admin to dele...

Bosch IP cameras security breach

Bosch IP cameras are network cameras from Bosch, Germany. A security vulnerability exists in Bosch IP cameras that could allow a user with administrative privileges to run arbitrary commands on the camera's operating system. The following products and versions are affected: Bosch Camera CPP13...