CVE-2024-47210

Gladys Assistant before 4.45.1 allows Privilege Escalation a user changing their own role because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js...

Gladys Assistant security vulnerabilities

Gladys Assistant is a source home assistant software from Gladys Assistant open source. A security vulnerability exists in Gladys Assistant versions prior to 4.45.1 that stems from allowing elevation of privilege...

CVE-2024-47210: Uncontrolled Resource Consumption

Gladys Assistant before 4.45.1 allows Privilege Escalation a user changing their own role because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js...

CVE-2024-47210

Gladys Assistant versions prior to 4.45.1 are vulnerable to Privilege Escalation due to an improper input validation flaw. Specifically, the updateMySelf function in server/api/controllers/user.controller.js allows a user to change their own role because req.body.role can be processed by the appl...

PT-2024-32479

Name of the Vulnerable Software and Affected Versions Gladys Assistant versions prior to 4.45.1 Description The issue allows a user to change their own role, resulting in privilege escalation. This is possible because the req.body.role can be used in the updateMySelf function in...

CVE-2024-5931 BT: Unchecked user input in bap_broadcast_assistant

BT: Unchecked user input in bapbroadcastassistant...

CVE-2024-5931 BT: Unchecked user input in bap_broadcast_assistant

BT: Unchecked user input in bapbroadcastassistant...

CVE-2024-5931

CVE-2024-5931 affects Zephyr RTOS, specifically the bap_broadcast_assistant component, due to unchecked user input. Public sources indicate affected version range includes Zephyr 3.6 and earlier; the underlying issue is improper input validation, with potential availability impact (per NVD CVSS: ...

PT-2024-37247

Name of the Vulnerable Software and Affected Versions: bap broadcast assistant affected versions not specified Description: The issue concerns unchecked user input in the bap broadcast assistant, which poses a risk. There is no information provided about the estimated number of potentially affect...

Synology findhostd Detection (UDP)

UDP based detection of services supporting findhost protocol as used by the Synology Assistant. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2024-8478

The The Affiliate Super Assistent plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.5.3. This is due to the software allowing users to supply arbitrary shortcodes in comments when the 'Parse comments' option is enabled. This makes it...

CVE-2024-8478

The The Affiliate Super Assistent plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.5.3. This is due to the software allowing users to supply arbitrary shortcodes in comments when the 'Parse comments' option is enabled. This makes it...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multible go-git vulnerabilities.

Summary Potential go-git vulnerabilities CVE-2023-49568, CVE-2023-49569 have been identified that could affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-49568 DESCRIPTIO...

Kibana 8.15.1 Security Update (ESA-2024-27, ESA-2024-28)

Kibana arbitrary code execution via YAML deserialization in Amazon Bedrock Connector ESA-2024-27 A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic...

Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2024-39338, CVE-2024-4068, CVE-2021-23727)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. The update addresses these issues. Vulnerability Details CVEID:CVE-2024-39338 DESCRIPTION: Axios is vulnerable to server-side request forgery, caused by a flaw...

CVE-2024-34661

Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability...

CVE-2024-34661

Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability...

CVE-2024-34661

Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability...

CVE-2024-34661

CVE-2024-34661 concerns Samsung Assistant prior to version 9.1.00.7, where improper handling of insufficient permissions allows remote attackers to access location data with user interaction required to trigger. Affected software is Samsung Assistant; vulnerability arises from insufficient permis...

CVE-2024-34661

Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability...