PT-2024-29236

Name of the Vulnerable Software and Affected Versions FAST/TOOLS versions R9.01 through R10.04 CI Server versions R1.01.00 through R1.03.00 Description A vulnerability has been found in the affected products, where built-in accounts have no passwords set by default. This allows an attacker to gai...

Yokogawa FAST/TOOLS Security Breach

Yokogawa FAST/TOOLS is a real-time operations management and visualization software from Yokogawa Electric Yokogawa Corporation, Japan. A security vulnerability exists in Yokogawa FAST/TOOLS versions R9.01 through R10.04, and Collaborative Information Server versions R1.01.00 through R1.03.00,...

SUSE CVE-2024-38605

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment at card init The commit 81033c6b584b "ALSA: core: Warn on empty module" introduced a WARNON for a NULL module pointer passed at sndcard object creation, and it also wraps the code...

D-Link Wireless Router Configuration Command Injection

The vulnerability of D-Link wireless router microprogramming software is related to the presence of undocumented configuration commands. Exploiting this vulnerability allows a malicious actor to enable the Telnet service by accessing a specially crafted URL address, and then gain access to the...

Observable Timing Discrepancy

Overview Affected versions of this package are vulnerable to Observable Timing Discrepancy due to the handling of RSA premaster secrets when an invalid secret is received. An attacker can potentially observe timing differences by exploiting the additional processing performed when the premaster...

Ubuntu 20.04 LTS / 22.04 LTS : QEMU regression (USN-6567-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6567-2 advisory. USN-6567-1 fixed vulnerabilities QEMU. The fix for CVE-2023-2861 was too restrictive and introduced a behaviour change leading to a regression in...

RHEL 7 : bash (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - bash: when effective UID is not equal to its real UID the saved UID is not dropped CVE-2019-18276 - A...

Fluent Bit HTTP Server RCE

The vulnerability of the built-in HTTP server tool for logging and processing logs in Fluent Bit is related to the possibility of buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE CVE-2024-4775

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox 126...

Invalid Memory Access

Firefox is vulnerable to invalid memory access. The vulnerability is due to a missing iterator stop condition when handling WASM code in the built-in profiler, which can lead to invalid memory access and undefined behavior...

UBUNTU-CVE-2023-52694

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tpd12s015: Drop buggy exit annotation for remove function With tpd12s015remove marked with exit this function is discarded when the driver is compiled as a built-in. The result is that when the driver unbinds there is...

UBUNTU-CVE-2024-3044

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted...

CVE-2024-4775

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox 126...

CVE-2024-4775

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox 126...

UBUNTU-CVE-2024-4775

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox 126...

CVE-2024-4775

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox 126...

CVE-2024-4775

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox 126...

LibreOffice input validation vulnerability

LibreOffice is an open source office software suite from The Document Foundation tdf. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. An input validation error vulnerability exists in LibreOffice that stems from the execution of...

PT-2024-6060

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 126 Description The issue is related to a missing iterator stop condition when handling WASM code in the built-in profiler. This could lead to invalid memory access and undefined behavior, potentially allowing an...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which originates from an invalid memory access in the built-in analyzer, and can be exploited by an attacker to bypass security restrictions...