PT-2024-6131 · Sap · Sap Bex Web Java Runtime Export Web Service

Name of the Vulnerable Software and Affected Versions: SAP BEx Web Java Runtime Export Web Service affected versions not specified Description: The issue is related to insufficient validation of an XML document accepted from an untrusted source in the SAP BEx Web Java Runtime Export Web Service...

CVE-2023-7265

Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2023-7265

Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability...

Advisory ROSA-SA-2024-2462

Software: gstreamer1.0-plugins-good 1.19.1 OS: ROSA-CHROME packageevrstring: gstreamer1.0-plugins-good-1.19.1-4 CVE-ID: CVE-2022-2122 BDU-ID: 2022-06453 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the qtdemuxinflate function of the Gstreamer multimedia framework is caused by an integer overflow...

Security Bulletin: IBM Workload Automation potentially affected by multiple vulnerabilities in Java.

Summary IBM Workload Automation potentially vulnerable to multiple vulnerabilities in Java that can cause integrity, availability, information disclosure issues CVE-2024-20952, CVE-2024-20918, CVE-2024-20921, CVE-2024-20919, CVE-2024-20926, CVE-2024-20945 Vulnerability Details CVEID:CVE-2024-2095...

U.S. Dept Of Defense: DoD workstation exposed to internet via TinyPilot KVM with no authentication

The DoD workstation was exposed to the internet via a TinyPilot KVM device without any authentication. The TinyPilot KVM device was connected to the workstation and allowed remote access to the system over the internet...

The vulnerability of the Telnet service of the microprogramming software for routers such as FutureNet NXR, FutureNet VXR, and FutureNet WXR allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Telnet service provided by the microprogramming software for FutureNet NXR, FutureNet VXR, and FutureNet WXR is related to insecure resource initialization. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality,...

CVE-2024-39672

Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affect integrity and availability...

CVE-2024-39674

Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-7271

Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-39674

Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-39674

Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect availability...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei HarmonyOS is an operating system... A memory request logic vulnerability exists in Huawei EMUI and Huawei HarmonyOS. The vulnerability stems from a memo...

PT-2024-15263 · Unknown · Nms Module

Name of the Vulnerable Software and Affected Versions: NMS module affected versions not specified Description: The issue is a privilege escalation vulnerability in the NMS module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the moment, there is no...

PT-2024-28614 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery affected versions not specified Description: The issue is related to a plaintext vulnerability in the Gallery search module. Successful exploitation of this vulnerability will affect availability. Recommendations: At the moment, there...

PT-2024-28612 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns a memory request logic vulnerability in the memory module. Successful exploitation of this vulnerability will affect integrity and availability. Recommendations: ...

PT-2024-29123 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.07 Description: The issue is related to an elevation of privilege vulnerability in server and client components. Attackers with local access and valid desktop user credentials can elevate their...

PT-2024-28610 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A privilege escalation vulnerability exists in the account synchronisation module. Successful exploitation of this issue will affect availability. Recommendations: At the moment,...

There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability.

...

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality causing an out-of-bounds read. The highest threat from this vulnerability is system availability.

...