Oracle Siebel CRM <= 24.7 (October 2024 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory. - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM component: EAI Apache Tomcat. Supported versions that are affected are...

JDK: Array indexing integer overflow (8328544)

A flaw was found in OpenJDK. An integer overflow vulnerability in the HotSpot component during array indexing calculations can cause incorrect data elements to be selected. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to affected...

JDK: Unbounded allocation leads to out-of-memory error (8331446)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;...

MAL-2024-9479 Malicious code in @usaa-grp-inf-presentation/usaa-tw-apps (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-45741

In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108 and 9.1.2312.205, a low-privileged user that does not hold the "admin" or "power" Splunk roles could create a malicious payload through a custom configuration file that the "api.uri" paramete...

Microsoft Office Microsoft 365 Apps for Enterprise Insecure Search Path

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Octo2 Malware Uses Fake NordVPN, Chrome Apps to Infect Android Devices

Octo2 malware is targeting Android devices by disguising itself as popular apps like NordVPN and Google Chrome. This…...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Microsoft 365 Apps for Enterprise Sensitive Data Protection

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

firefox: thunderbird: External protocol handlers could be enumerated via popups

The Mozilla Foundation's Security Advisory: By checking the result of calls to window.open with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed...

Citrix Virtual Apps and Desktops: Session Launch Issues

Introduction This article provides a list of Knowledge Base resources on how to investigate, troubleshoot, and prevent the most common issues with session launch in Citrix Virtual Apps and Desktops. Overview of the Issue The process of session launch in Citrix Virtual Apps and Desktops is depende...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office for Mac and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

October 8, 2024—KB5044286 (OS Build 10240.20796) - EXPIRED

None None...

CVE-2024-39831

in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free...

CVE-2024-39831 AccessTokenManager has an use after free vulnerability

in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free...

CVE-2024-39831

OpenHarmony CVE-2024-39831 affects OpenHarmony v4.1.0. The vulnerability is described as a use-after-free in AccessTokenManager that allows a local attacker with high privileges to achieve arbitrary code execution within pre-installed apps. The issue is local in scope with high confidentiality/in...

CVE-2024-39831 AccessTokenManager has an use after free vulnerability

in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free...

CVE-2024-39831: Use After Free

in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through use after free...

KLA73905 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-43604 Exploitation Related products Microsoft-Outlook CVE list CVE-2024-43604 high Solution Install necessary updates from the KB...

PT-2025-7909

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps affected versions not specified Description The issue is related to incorrect ownership assignment in some Zoom Workplace Apps, which may allow a privileged user to conduct an information disclosure via network access...