The vulnerability of the application software interface of the Trend Micro Cloud Edge device for comprehensive network security management allows a perpetrator to execute arbitrary code.

The vulnerability of the application software interface of the Trend Micro Cloud Edge device for comprehensive network security management is related to the failure to take measures for data cleaning at the management level. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the Item Catalog component of the Oracle Product Hub data management software in the Oracle E-Business Suite system, which allows a malicious individual to access, modify, add, or delete data.

The vulnerability of the Item Catalog component in the Oracle Data Management Software, part of the Oracle Product Hub system, which is used in the Oracle E-Business Suite for enterprise automation, is related to deficiencies in the authentication process. Exploiting this vulnerability could allo...

Cisco UCS Central Software Configuration Backup Information Disclosure (cisco-sa-ucsc-bkpsky-TgJ5f73J)

According to its self-reported version, Cisco UCS Central Software Configuration Backup Information Disclosure is affected by a vulnerability. - A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file to learn sensitive information...

PT-2024-7356 · Jetbrains · Jetbrains Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.47197 Description: The issue is related to insufficient validation of the communication channel source in the iframe plugin of JetBrains YouTrack. This can allow an attacker to execute arbitrary...

The vulnerability of the Visual Studio C++ Redistributable installation program allows a hacker to enhance their privileges.

The vulnerability of the Visual Studio C++ Redistributable installation tool for Microsoft Visual Studio development tools is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

PT-2024-7336 · Cisco · Cisco Ucs Central

Name of the Vulnerable Software and Affected Versions: Cisco UCS Central Software affected versions not specified Description: A weakness in the encryption method used for the backup function in Cisco UCS Central Software could allow an attacker with access to a backup file to learn sensitive...

CVE-2024-45273

CVE-2024-45273 describes an unauthenticated local attacker who can decrypt the device’s configuration file due to a weak encryption implementation, leading to compromise of confidentiality, integrity, and availability. The vulnerability is triggered locally (attack vector: LOCAL) with low privile...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control mechanisms. This allows unauthorized individuals to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2024-7510 · Nginx · Nginx-Ui

Name of the Vulnerable Software and Affected Versions: Nginx UI versions prior to 2.0.0-beta.36 Description: The issue is related to the configuration settings of the Nginx UI server, specifically the /api/configs directory, and is associated with weaknesses in the authorization procedure. This c...

The vulnerability of the ColdFusion software platform, related to deficiencies in the authentication process, allows attackers to escalate their privileges.

The vulnerability of the ColdFusion software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers allows a hacker to enhance their privileges.

The vulnerability of the web-based management interface for Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN routers is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to elevate their privileges from “guest” t...

PT-2024-31503 · Diebold Nixdorf · Diebold Nixdorf

Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf affected versions not specified Description: The issue concerns an Uncontrolled Search Path Element, which is a type of security weakness. This weakness can potentially be exploited to execute malicious code or escalate...

The vulnerability of the JetBrains YouTrack project management and task management software, related to deficiencies in the authentication mechanism, allows attackers to escalate their privileges and execute arbitrary commands.

The vulnerability of the JetBrains YouTrack project management and task management software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to gain elevated privileges and execute arbitrary commands...

CVE-2024-20515

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to a lack of proper data protection mechanisms for certain configuration...

Cisco Nexus Dashboard 安全漏洞

Cisco Nexus Dashboard is a single console from Cisco, Inc. It can simplify the operation and management of data center networks. A security vulnerability exists in Cisco Nexus Dashboard that stems from insufficient authorization controls on certain REST API endpoints. Allowing an authenticated,...

Mitel MiContact Center Business 安全漏洞

Mitel MiContact Center Business is an all-media contact center platform from Mitel Canada. The platform is used in customer communication, production management and other scenarios. A security vulnerability exists in Mitel MiContact Center Business version 10.1.0.4 and prior versions, which stems...

CVE-2024-45920

A Stored Cross-Site Scripting XSS vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security weakness in Certifi python-certifi [CVE-2024-39689]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security weakness in Certifi python-certifi, caused by the use of GLOBALTRUST root certificate CVE-2024-39689. Certifi python-certifi is used by our Speech Service runtimes. This vulnerabilitiy has been...

PT-2024-6815 · Unknown · Zangi Private Messenger

Name of the Vulnerable Software and Affected Versions: Zangi Private Messenger affected versions not specified Description: The issue is related to weaknesses in the session key generation mechanism of the application. This could allow a remote attacker to implement a "man-in-the-middle" attack...

CVE-2024-45723 goTenna Pro ATAK Plugin Use of Cryptographically Weak Pseudo-Random Number Generator

The goTenna Pro ATAK Plugin does not use SecureRandom when generating passwords for sharing cryptographic keys. The random function in use makes it easier for attackers to brute force this password if the broadcasted encryption key is captured over RF. This only applies to the optional broadcast ...