CVE-2024-45037 AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template

The AWS Cloud Development Kit CDK is an open-source framework for defining cloud infrastructure using code. Customers use it to create their own applications which are converted to AWS CloudFormation templates during deployment to a customer’s AWS account. CDK contains pre-built components called...

PT-2024-6706 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

The vulnerability of the dbgdbg_typevalue function in the /output/outdbg.c file of the Netwide Assembler (NASM) assembly language allows a hacker to disclose protected information or cause a service failure.

The vulnerability of the dbgdbgtypevalue function in the /output/outdbg.c file of the Netwide Assembler NASM is related to buffer overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause system failures...

ROS-20240826-26

A vulnerability in the Hotspot component of Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK and Oracle Java SE software platform is associated with insufficient protection of service data. Exploitation of the vulnerability could allow an attacker acting remotely to gain...

Apache Portable Runtime 安全漏洞

Apache Portable Runtime APR is an Apache Foundation library that provides an underlying support interface for upper-tier applications that can be used across multiple operating system platforms. A security vulnerability exists in Apache Portable Runtime versions 0.9.0 through 1.7.4, which stems...

PT-2024-7532 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a memory buffer overflow in the AcTranslators.exe executable file of Autodesk AutoCAD. This can be exploited by using a specially crafted STEP file,...

CVE-2024-7602

Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to exploit this vulnerability. The specif...

The vulnerability of the formApPortalPhoneAuth function in the Tenda i22 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formApPortalPhoneAuth function in the Tenda i22 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the Bluetooth driver for Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of Bluetooth driver for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Security Center Broker component of the Windows operating system, which allows a perpetrator to disclose protected information

The vulnerability of the Security Center Broker component of the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the dbgfs_target_ids_write() function in the dbgfs component of the Linux operating system’s kernel allows a attacker to disclose protected information.

The vulnerability of the dbgfstargetidswrite function in the dbgfs component of the Linux operating system’s kernel is related to the issue of targetids being written multiple times without the monitoring and termination of DAMON. The number of references does not decrease, and memory for the...

The vulnerability of the Dell Isilon InsightIQ analytical platform for monitoring performance and generating reports lies in its use of cryptographic algorithms, which have defects and risks. This allows attackers to exploit these vulnerabilities to disclose protected information.

The vulnerability of the Dell Isilon InsightIQ performance monitoring and reporting platform relates to the use of cryptographic algorithms that contain vulnerabilities and risks. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Jieshun JieLink+ JSOTC2016 访问控制错误漏洞

Jieshun JieLink+ JSOTC2016 is an intelligent terminal operating platform from China's Jieshun Jieshun Corporation. An access control error vulnerability exists in Jieshun JieLink+ JSOTC2016 20240805 and earlier versions, which stems from the presence of sensitive information disclosure. A malicio...

PT-2024-41069 · Ооо 'Нпо Мир' · Scada Мир +5

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to the implementation of service protocols in software products, which involves the transmission of data in an open form. This could allow a remote attacker to disclose...

CVE-2024-28799

CVE-2024-28799 affects IBM QRadar Suite Software (1.10.12.0–1.10.23.0) and IBM Cloud Pak for Security (1.10.0.0–1.10.11.0). Root cause: sensitive data is displayed improperly to a local privileged user during back-end commands in non-default configurations, leading to potential information disclo...

Magento Improper Access Control Leads to Privilege escalation

Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information...

Fortra GoAnywhere MFT 安全漏洞

Fortra GoAnywhere MFT is a secure file transfer solution from Fortra USA. A security vulnerability exists in Fortra GoAnywhere MFT versions prior to 7.6.0 that stems from an authentication bypass vulnerability that allows an administrator user with access to the agent console to bypass certain...

PT-2024-20790 · Helpsystems · Goanywhere Mft

Name of the Vulnerable Software and Affected Versions: GoAnywhere MFT versions prior to 7.6.0 Description: An authentication bypass issue allows Admin Users with access to the Agent Console to circumvent some permission checks, potentially leading to unauthorized information disclosure or...

Zoom多款产品 安全漏洞

Zoom Rooms and others are products of Zoom Corporation, USA.Zoom Rooms is a software-based conferencing system.Zoom Meeting SDK is a development kit.Zoom Workplace is a desktop application software. A security vulnerability exists in a number of Zoom products. An attacker exploiting this...

CVE-2024-41734

Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability...