3205 matches found
This Week in Spring - October 15th, 2024
Hi, Spring fans! Welcome to another rip-roaring and ever-so-riveting installment of This Week in Spring! I'm in Amsterdam, at the moment, rounding out a week between Antwerp, Beglium, and Amsterdam, the Netherlands. Today I'm off to Dubai for the fantastic GITEX/DevSlam event. Then I return back ...
The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the uncontrolled element of the search path, which allows attackers to exploit their privileges.
The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
ROS-20241001-08
Vulnerability of SPRT dissector of Wireshark computer network traffic analyzer related to access to an uninitialized pointer. uninitialized pointer. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service via packet injection or a specially crafted capture...
[SECURITY] [DLA 3906-1] wireshark security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3906-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 30, 2024 https://wiki.debian.org/LTS -...
Debian dla-3906 : libwireshark-data - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3906 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3906-1 [email protected]...
Malicious code in algolia-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e9938b498a630cfc9745cf7083809d4bc8477a92664b7f56c0b41b82f0d30e4 The OpenSSF Package Analysis project identified 'algolia-analyzer' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9021 Malicious code in algolia-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e9938b498a630cfc9745cf7083809d4bc8477a92664b7f56c0b41b82f0d30e4 The OpenSSF Package Analysis project identified 'algolia-analyzer' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
The vulnerability of the SPP analyzer in the software environment of the simulation model for systems and processes in Siemens Tecnomatix Plant Simulation allows a perpetrator to execute arbitrary code.
The vulnerability of the SPP analyzer in the simulation modeling environment of Siemens Tecnomatix Plant Simulation relates to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted SPP file...
CVE-2024-41729
Due to missing authorization checks, SAP BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the application...
CVE-2024-44113 Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer)
Due to missing authorization checks, SAP Business Warehouse BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the...
CVE-2024-41729 Information Disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer)
Due to missing authorization checks, SAP BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the application...
CVE-2024-41729
CVE-2024-41729 affects SAP NetWeaver BW/BEx Analyzer; root cause is missing authorization checks, allowing an authenticated attacker to read restricted information over the network with a limited confidentiality impact. Affected component: SAP BEx Analyzer within SAP NetWeaver BW. Impact: informa...
Security Bulletin: IBM InfoSphere Information Server is vulnerable to SQL injection (CVE-2024-40689)
Summary A SQL injection vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-40689 DESCRIPTION: IBM InfoSphere Server is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to...
PT-2024-30956 · Sap · Sap Business Warehouse
Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse BEx Analyzer affected versions not specified Description: The issue is related to missing authorization checks in SAP Business Warehouse BEx Analyzer, allowing an authenticated attacker to access restricted information...
CVE-2024-44951
In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is received on channel A at almost the same time as a packet is about to be transmitted on channel B, we observe with a logic analyzer that the received packet on...
CVE-2024-44951
Idea: CVE-2024-44951 affects the Linux kernel’s serial driver for sc16is7xx (TX/RX channel handling).What’s affected: The regression caused by commit 4409df5866b7 that changed EFR locking to operate per channel introduced TX buffer data corruption where data from channel A could be written into c...
Moderate: Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.1.2
Red Hat Trusted Profile Analyzer 1.1.2 release Red Hat Product Security has rated this update as having a security impact of Moderate Red Hat Trusted Profile Analyzer 1.1.2 Security Fixes: nodejs-async: Regular expression denial of service while parsing function in autoinject CVE-2024-39249 For...
Binom3 Web Management Login Scanner, Config And Password File Dump
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Binom3 Web Management Login Scanner, Config and Password File Dump', 'Description' = % This module scans for Binom3 Multifunctional Revenue Energ...
ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure', 'Description' = %q ManageEngine...
Cablehaunt Cable Modem WebSocket Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'eventmachine' require 'faye/websocket' class MetasploitModule '"Cablehaunt" Cable Modem WebSocket DoS', 'Description' = %q There exists a buffer overflow...