Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account...

Security Bulletin: AIX is affected by a denial of service (CVE-2024-0397) and information disclosure (CVE-2024-4032, CVE-2024-37891) due to Python

Summary Vulnerabilities in Python could allow a remote attacker to cause a denial of service CVE-2024-0397 or obtain sensitive information CVE-2024-4032, CVE-2024-37891. Python is used by AIX as part of Ansible node management automation. Vulnerability Details CVEID:CVE-2024-4032 DESCRIPTION: An...

CVE-2024-43460

Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network...

Dynamics 365 Business Central Elevation of Privilege Vulnerability

Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network...

Backstage 安全漏洞

Backstage is a Backstage open source application. Backstage is an open platform for building developer portals. A security vulnerability exists in Backstage version 1.25.0, which originates from an instance of Backstage with the Directory Backend plugin installed, where a malicious actor with...

PT-2024-11619 · Zte · Zte Mf296R

Name of the Vulnerable Software and Affected Versions: ZTE MF296R affected versions not specified Description: The issue is related to a buffer overflow due to insufficient validation of the SMS parameter length. This allows an authenticated attacker to potentially perform a denial of service...

CVE-2024-45413

The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsadecrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted ciphertext, the decrypted data is stored on the stack without checking its length. An authenticated attacker can get RC...

Intel Raid Web Console 安全漏洞

Intel Raid Web Console is a web-based, Intel Corporation USA application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. A security vulnerability exists in Intel Raid Web Console that stems from the inclusion of an uncaught exception...

Intel Raid Web Console 代码问题漏洞

Intel Raid Web Console is a web-based, Intel Corporation USA application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. Intel Raid Web Console has a code issue vulnerability that stems from the inclusion of an uncontrolled search pa...

CVE-2024-45413

The CVE-2024-45413 issue affects the HTTPD binary in multiple ZTE routers. A stack-based buffer overflow in rsa_decrypt, an API wrapper for LUA used to decrypt RSA ciphertext, stores decrypted data on the stack without length checks. This allows an authenticated attacker to achieve remote code ex...

Intel RAID Web Console 访问控制错误漏洞

Intel Raid Web Console is a web-based, Intel Corporation USA application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. The Intel RAID Web Console is vulnerable to an access control error vulnerability that stems from the inclusion ...

Intel Raid Web Console 访问控制错误漏洞

Intel Raid Web Console is a web-based, Intel Corporation application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. The Intel Raid Web Console is vulnerable to an access control error vulnerability that stems from the inclusion of a...

CVE-2024-45413

The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsadecrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted ciphertext, the decrypted data is stored on the stack without checking its length. An authenticated attacker can get RC...

Intel Raid Web Console 安全漏洞

Intel Raid Web Console is a web-based application from Intel Corporation that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. A security vulnerability exists in Intel Raid Web Console that stems from the inclusion of an incorrect input...

PT-2024-31616 · Zte · Zte Routers

Name of the Vulnerable Software and Affected Versions: ZTE routers affected versions not specified Description: The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in the rsa decrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted...

Intel Raid Web Console 代码问题漏洞

Intel Raid Web Console is a web-based application from Intel Corporation that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. Intel Raid Web Console has a code issue vulnerability that stems from the inclusion of a null pointer dereferenc...

Intel Raid Web Console 访问控制错误漏洞

Intel Raid Web Console is a web-based, Intel Corporation application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. The Intel Raid Web Console is vulnerable to an access control error vulnerability that stems from the inclusion of a...

CVE-2024-45413

The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsadecrypt function. This function is an API wrapper for LUA to decrypt RSA encrypted ciphertext, the decrypted data is stored on the stack without checking its length. An authenticated attacker can get RC...

CVE-2024-39926

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. A stored cross-site scripting XSS or, due to the default CSP, HTML injection vulnerability has been discovered in the admin dashboard. This potentially allows an authenticated attacker to inject malicious code into the dashboard,...

CVE-2024-8747

The Email Obfuscate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'email-obfuscate' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...