SAP NetWeaver Deserialization

The vulnerability of the SAP NetWeaver software integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

TOTOlink EX1800T Wi-Fi extension software setRebootScheCfg() function

The vulnerability of the setRptWizardCfg function /cgi-bin/cstecgi.cgi of the TOTOlink EX1800T Wi-Fi extension software is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and...

SAP Landscape Transformation Functional Module

The vulnerability of the functional module of the RFC interface of the software tool for managing changes and migrations in SAP Landscape Transformation SLT is related to improper code generation. Exploiting this vulnerability can allow an attacker to influence the confidentiality, integrity, and...

SLD Component SAP Business One Data Compromise

The vulnerability of the SLD component in the SAP Business One resource management system is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality, integrity, and accessibility of the protected informatio...

macsec_dev_init() Function Heap Buffer Overflow DoS

Vulnerability of the macsecdevinit function in the drivers/net/macsec.c module – The Linux kernel network device driver framework is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

panfrost_ioctl_submit Heap Buffer Overflow DoS

Vulnerability of the panfrostioctlsubmit function in the drivers/gpu/drm/panfrost/panfrostdrv.c module – The driver for supporting Direct Rendering Infrastructure DRI in the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability coul...

Linux kernel BPF BTF ID Set Contains

The vulnerability of the btfidsetcontains function in the kernel/bpf/btf.c module, which supports BPF in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

bfq_dispatch_request Kernel Data Compromise

The vulnerability of the bfqdispatchrequest function in the block/bfq-iosched.c module, which supports the block-level kernel in the Linux operating system, is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the...

QNAP QTS和QNAP QuTS hero 代码问题漏洞

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

FIELDVUE ValveLink Information Disclosure

The vulnerability of FIELDVUE Emerson ValveLink software products regarding setup, calibration, and diagnostics is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected...

Mozilla Firefox Thunderbird Buffer Overflow

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Phoenix Contact Eichrecht() Function Data Compromise Manipulation

The vulnerability of the Eichrecht function in microprogrammed software-based modular control devices for DC charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, stems from the copying of buffers witho...

Bank Account Application SAP S/4HANA Data Compromise

The vulnerability of the Bank Account Application component in the SAP S/4HANA software platform is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to potentially compromise the integrity of the protected information...

Linux kernel TSC_FACTOR Data Compromise

The vulnerability of the TSCFACTOR parameter in the Secure TSC function of Linux kernel is related to incorrect initialization of the resource. Exploiting this vulnerability can allow attackers to compromise the integrity of protected information and cause service failures...

Mozilla Firefox Information Disclosure

The vulnerability of Mozilla Firefox browsers is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

Mozilla Firefox False Representation

The vulnerability of Mozilla Firefox and Mozilla Firefox ESR browsers is related to the false representation of critical information to the user interface. Exploiting this vulnerability can allow an attacker to influence the integrity of the protected information...

Mozilla Firefox Thunderbird Network Policy Data Compromise

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of an untrusted network policy file. Exploiting these vulnerabilities allows a malicious actor to compromise the integrity of protected information...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues

Summary Multple vulnerabilities affect IBM Sterling Secure Proxy and are addressed in the latest release and iFix Vulnerability Details CVEID:CVE-2024-13009 DESCRIPTION: In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating...

Mozilla Firefox JavaScript Engine Data Compromise

The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of...

Linux Distros Unpatched Vulnerability : CVE-2023-4639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker...