CVE-2024-23621 IBM Merge Healthcare eFilm Workstation License Server Buffer Overflow

A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution...

CVE-2024-23621 IBM Merge Healthcare eFilm Workstation License Server Buffer Overflow

A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution...

CVE-2024-23621

The CVE-2024-23621 entry concerns IBM Merge Healthcare eFilm Workstation license server with a buffer overflow vulnerability. A remote, unauthenticated attacker could exploit this to achieve remote code execution. Documents consistently identify the affected component as the license server compon...

CVE-2024-23620 IBM Merge Healthcare eFilm Workstation SYSTEM Privilege Escalation

An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileges to SYSTEM...

CVE-2024-23620

CVE-2024-23620 describes an improper privilege management vulnerability in IBM Merge Healthcare eFilm Workstation. The issue allows a local, authenticated attacker to escalate privileges to SYSTEM, due to faulty privilege handling within the software. Affected product: IBM Merge Healthcare eFilm ...

CVE-2024-23620 IBM Merge Healthcare eFilm Workstation SYSTEM Privilege Escalation

An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileges to SYSTEM...

CVE-2024-23619 IBM Merge Healthcare eFilm Workstation Hardcoded Credentials

A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution...

CVE-2024-23619 IBM Merge Healthcare eFilm Workstation Hardcoded Credentials

A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution...

CVE-2024-23619

CVE-2024-23619 affects IBM Merge Healthcare eFilm Workstation. The connected documents identify a hardcoded credential vulnerability as the root cause, allowing a remote, unauthenticated attacker to achieve information disclosure or remote code execution. Affected software is IBM Merge Healthcare...

CVE-2024-23621: Incorrect Calculation of Buffer Size

A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution...

PT-2024-19977 · Ibm · Ibm Merge Healthcare Efilm Workstation

Name of the Vulnerable Software and Affected Versions: IBM Merge Healthcare eFilm Workstation affected versions not specified Description: A buffer overflow exists in the license server of IBM Merge Healthcare eFilm Workstation. This issue can be exploited by a remote, unauthenticated attacker to...

CVE-2024-23622: Incorrect Calculation of Buffer Size

A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution with SYSTEM privileges...

CVE-2024-23620: Improper Privilege Management

An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileges to SYSTEM...

PT-2024-19978 · Ibm · Ibm Merge Healthcare Efilm Workstation

Name of the Vulnerable Software and Affected Versions: IBM Merge Healthcare eFilm Workstation affected versions not specified Description: A stack-based buffer overflow exists in the license server of IBM Merge Healthcare eFilm Workstation. This issue can be exploited by a remote, unauthenticated...

PT-2024-19974

Name of the Vulnerable Software and Affected Versions IBM Merge Healthcare eFilm Workstation affected versions not specified Description A hardcoded credential vulnerability exists in the software. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure...

PT-2024-19976 · Ibm · Ibm Merge Healthcare Efilm Workstation

Name of the Vulnerable Software and Affected Versions: IBM Merge Healthcare eFilm Workstation affected versions not specified Description: An improper privilege management issue exists, allowing a local, authenticated attacker to escalate privileges to SYSTEM. Recommendations: At the moment, ther...

CVE-2024-23619: Use of Hard-coded Credentials

A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution...

PT-2024-15575 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 14.0 through 16.6.5 GitLab versions 16.7 through 16.7.3 GitLab versions 16.8 through 16.8.0 Description: An authorization issue exists, allowing an unauthorized attacker to assign arbitrary users to merge requests MRs they...

GitLab 14.0 < 16.6.6 / 16.7 < 16.7.4 / 16.8 < 16.8.1 (CVE-2024-0456)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that th...

Cross site request forgery (csrf)

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge...