GLSA-202405-22 : rsync: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-22 rsync: Multiple Vulnerabilities - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 - A flaw was found in rsync in versions since...

The vulnerability of the sub_42CB94() function (/goform/SetVirtualServerCfg) in the Tenda TX9 Pro router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub42CB94 function /goform/SetVirtualServerCfg of the Tenda TX9 Pro router software is related to the operation of writing data beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows an attacker to compromise the...

SUSE CVE-2024-27035

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to guarantee persisting compressed blocks by CP If data block in compressed cluster is not persisted with metadata during checkpoint, after SPOR, the data may be corrupted, let's guarantee to write compressed...

ROS-20240503-15

A vulnerability in the PSA Crypto API of the Mbed TLS and Mbed Crypto software is related to a insufficient spatial separation. Exploitation of the vulnerability could allow an attacker to have an impact the confidentiality, integrity, and availability of data Vulnerability in the...

The vulnerability of the formDelDhcpRule() function (/goform/DelDhcpRule) in the Tenda W15E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formDelDhcpRule function /goform/DelDhcpRule in the Tenda W15E router software is related to the issue of the operation going beyond the buffer in memory when processing the delDhcpIndex parameter. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2024-4090

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a slab-use-after-free vulnerability in the msft do close function. This vulnerability is caused by a race condition where the msft-data is freed in hci release de...

ROS-20240503-14

A vulnerability in the PSA Crypto API of the Mbed TLS and Mbed Crypto software is related to a insufficient spatial separation. Exploitation of the vulnerability could allow an attacker to have an impact the confidentiality, integrity, and availability of data Vulnerability in the...

The vulnerability of the RDP client FreeRDP, related to memory-walking attacks, allows attackers to compromise the integrity of protected information.

The vulnerability of the RDP client FreeRDP relates to memory-walking attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the protected information...

Save as PDF plugin by Pdfcrowd < 3.2.1 - Missing Authorization

Description The Save as PDF plugin by Pdfcrowd plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createsamplebutton function in versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with...

kernel: RDMA/rxe: Fix incomplete state save in rxe_requester

An incorrect state restoration flaw was found in the Linux kernel's RDMA rxe soft-RoCE driver in the requester packet transmission logic. A local user with access to RDMA devices can trigger this issue when network layer packet drops occur during RDMA send operations, causing the work queue eleme...

The vulnerability of the Alternate Services component in the Firefox web browser, related to integer overflow, allows an attacker to compromise data integrity.

The vulnerability of the Alternative Services component in the Firefox web browser is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability in the Firefox web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of function R7WebsSecurityHandler (/goform/execCommand) in the Tenda AC8 router’s microprogramming system, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of function R7WebsSecurityHandler /goform/execCommand in the Tenda AC8 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to an improper limitation on the visible layers of the user interface, allowing a malicious actor to compromise data integrity.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird arises from incorrect handling of symbolic links before accessing a file, allowing an attacker to compromise data integrity.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to an incorrect definition of symbolic links before accessing a file. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability in the Firefox web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

PT-2024-3534 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.6.2722 build 20240402 QuTS hero versions prior to h5.1.6.2734 build 20240414 Description: The issue is caused by a buffer copy without checking the size of the input, which may allow authenticated users to execute co...

The vulnerability of the fromRouteStatic function in the microprogramming software for Tenda F1202, FH1202, AC7, and PW201A routers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromRouteStatic function in the microprogramming software for Tenda F1202, FH1202, AC7, and PW201A routers is related to buffer overflows in the stack when processing the page parameter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality...

The vulnerability of Varnish cache servers, related to the manipulation of requests on the server side, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Varnish cache server relates to the manipulation of requests on the server side. Exploiting this vulnerability allows a malicious actor to affect the integrity of the protected information through a specially crafted HTTP request...

Oracle Linux 8 : shim (ELSA-2024-1902)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1902 advisory. 15.8-4.0.1 - Add support for Oracle signed shim Orabug: 36540084 - Add shim binaries signed with Oracle Secure Boot Signing key 1 Orabug: 36540084...