Mozilla Firefox < 125.0

The version of Firefox installed on the remote Windows host is prior to 125.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-18 advisory. - The executable file warning was not presented when downloading .xrm-ms files. Note: This issue only affected Windows...

Malicious code in wt-fe-buz-utilities-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da59ce3066bc4f743fd62c3c5db000f13a21c5167bf5987991697d4b631b6288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1266 Malicious code in wt-fe-buz-utilities-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da59ce3066bc4f743fd62c3c5db000f13a21c5167bf5987991697d4b631b6288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in wt-fe-buz-utilities-collection

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Palo Alto Networks PAN-OS Unauthenticated Remote Code Execution

This module exploits two vulnerabilities in Palo Alto Networks PAN-OS that allow an unauthenticated attacker to create arbitrarily named files and execute shell commands. Configuration requirements are PAN-OS with GlobalProtect Gateway or GlobalProtect Portal enabled and telemetry collection on...

SUSE CVE-2024-26750

In the Linux kernel, the following vulnerability has been resolved: afunix: Drop oobskb ref before purging queue in GC. syzbot reported another task hung in unixgc. 0 The current while loop assumes that all of the left candidates have oobskb and calling kfreeskboobskb releases the remaining...

CVE-2024-2221: Unrestricted Upload of File with Dangerous Type

qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the /collections/COLLECTION/snapshots/upload endpoint, specifically through the snapshot parameter. This vulnerability allows attackers to upload and overwrite any file on the filesystem, leading to...

PT-2024-4409 · Unknown · Edu-Sharing

Name of the Vulnerable Software and Affected Versions: edu-sharing versions 8.0.8-RC2, 8.1.4-RC0, 9.0.0-RC19 can be simplified to: edu-sharing versions prior to 8.0.8-RC2, 8.1.4-RC0, and 9.0.0-RC19 However, given the instruction to consolidate ranges into the most concise form and considering the...

CVE-2024-28167

SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, specific data can be changed via the Enter Package Data app although the user does not have sufficient authorization...

CVE-2024-28167 Missing Authorization check in SAP Group Reporting Data Collection (Enter Package Data)

SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, specific data can be changed via the Enter Package Data app although the user does not have sufficient authorization...

CVE-2024-28167 Missing Authorization check in SAP Group Reporting Data Collection (Enter Package Data)

SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, specific data can be changed via the Enter Package Data app although the user does not have sufficient authorization...

CVE-2024-28167

CVE-2024-28167 concerns SAP Group Reporting Data Collection and its module component related to the Enter Package Data app. The available documents state that an authenticated user may bypass authorization checks, enabling an escalation of privileges. This can allow the user to change specific da...

SAP Group Reporting Data Collection 安全漏洞

SAP Group Reporting Data Collection is a group reporting data collection program from SAP, Germany. A security vulnerability exists in SAP Group Reporting Data Collection that stems from not performing the required authorization checks on authenticated users, which can lead to privilege escalatio...

CVE-2024-28167: Missing Authorization

SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, specific data can be changed via the Enter Package Data app although the user does not have sufficient authorization...

PT-2024-7548 · Microsoft · Azure Monitor Agent

Name of the Vulnerable Software and Affected Versions: Azure Monitor Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Monitor Agent, which is used for data collection from virtual machines VM and physical servers. The...

PT-2024-2863

Name of the Vulnerable Software and Affected Versions SAP Group Reporting Data Collection affected versions not specified Description The issue is related to insufficient authorization checks in the SAP Group Reporting Data Collection component, specifically affecting the Enter Package Data app...

SUSE CVE-2024-26676

In the Linux kernel, the following vulnerability has been resolved: afunix: Call kfreeskb for dead unixsk-oobskb in GC. syzbot reported a warning 0 in unixgc with a repro, which creates a socketpair and sends one socket's fd to itself using the peer. socketpairAFUNIX, SOCKSTREAM, 0, 3, 4 = 0...

CVE-2023-6522

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914...

PT-2024-14990 · Extreme Networks · Extreme Xds

Name of the Vulnerable Software and Affected Versions: Extreme XDS versions before 3914 Description: The issue affects ExtremePacs Extreme XDS, allowing collection of data as provided by users due to improper privilege management. Recommendations: For versions before 3914, update to version 3914 ...

DEBIAN-CVE-2024-26780

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix task hung while purging oobskb in GC. syzbot reported a task hung; at the same time, GC was looping infinitely in listforeachentrysafe for OOB skb. 0 syzbot demonstrated that the listforeachentrysafe was not actually...